Edit tour

Windows Analysis Report
iieCxV2b1n.msi

Overview

General Information

Sample name:	iieCxV2b1n.msi renamed because original name is a hash value
Original sample name:	afbdaa974cdc9624fe94b5c0ca6ce01695570790a68cc9c86ea0619973f13d07.msi
Analysis ID:	1536943
MD5:	d87cc5fb2d4047d442446cc6d2d01cf9
SHA1:	8d2c76bb8248b1c8171c4cc198255d5613afe6fe
SHA256:	afbdaa974cdc9624fe94b5c0ca6ce01695570790a68cc9c86ea0619973f13d07
Tags:	fsb-rodeomsiuser-JAMESWT_MHT
Infos:

Detection

RedLine

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for dropped file

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected RedLine Stealer

AI detected suspicious sample

Connects to many ports of the same IP (likely port scanning)

Found direct / indirect Syscall (likely to bypass EDR)

Found hidden mapped module (file has been removed from disk)

Machine Learning detection for dropped file

Maps a DLL or memory area into another process

Switches to a custom stack to bypass stack traces

Writes to foreign memory regions

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for available system drives (often done to infect USB drives)

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Deletes files inside the Windows folder

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Dropped file seen in connection with other malware

Drops PE files

Drops files with a non-matching file extension (content does not match file extension)

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Launches processes in debugging mode, may be used to hinder debugging

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains executable resources (Code or Archives)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Uses code obfuscation techniques (call, push, ret)

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

msiexec.exe (PID: 1444 cmdline: "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\iieCxV2b1n.msi" MD5: E5DA170027542E25EDE42FC54C929077)

msiexec.exe (PID: 6400 cmdline: C:\Windows\system32\msiexec.exe /V MD5: E5DA170027542E25EDE42FC54C929077)

ManyCam.exe (PID: 5928 cmdline: "C:\Users\user\AppData\Local\Ormolu\ManyCam.exe" MD5: BA699791249C311883BAA8CE3432703B)

pcaui.exe (PID: 7068 cmdline: "C:\Windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {bce4b583-343f-44b8-8f95-9f76104077b9} -a "ManyCam" -v "ManyCam LLC" -s "To work properly, this app must be reinstalled after you upgrade Windows." -n 4 -f 0 -k 0 -e "C:\Users\user\AppData\Local\Ormolu\ManyCam.exe" MD5: 0BA34D8D0BD01CB98F912114ACC7CF19)

ManyCam.exe (PID: 2680 cmdline: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe MD5: BA699791249C311883BAA8CE3432703B)

pcaui.exe (PID: 2800 cmdline: "C:\Windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {bce4b583-343f-44b8-8f95-9f76104077b9} -a "ManyCam" -v "ManyCam LLC" -s "To work properly, this app must be reinstalled after you upgrade Windows." -n 4 -f 0 -k 0 -e "C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe" MD5: 0BA34D8D0BD01CB98F912114ACC7CF19)

cmd.exe (PID: 2672 cmdline: C:\Windows\SysWOW64\cmd.exe MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 2364 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

MSBuild.exe (PID: 1408 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

ManyCam.exe (PID: 3984 cmdline: "C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe" MD5: BA699791249C311883BAA8CE3432703B)

pcaui.exe (PID: 5256 cmdline: "C:\Windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {bce4b583-343f-44b8-8f95-9f76104077b9} -a "ManyCam" -v "ManyCam LLC" -s "To work properly, this app must be reinstalled after you upgrade Windows." -n 4 -f 0 -k 0 -e "C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe" MD5: 0BA34D8D0BD01CB98F912114ACC7CF19)

cmd.exe (PID: 2848 cmdline: C:\Windows\SysWOW64\cmd.exe MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 2308 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

MSBuild.exe (PID: 7156 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
RedLine Stealer	RedLine Stealer is a malware available on underground forums for sale apparently as a standalone ($100/$150 depending on the version) or also on a subscription basis ($100/month). This malware harvests information from browsers such as saved credentials, autocomplete data, and credit card information. A system inventory is also taken when running on a target machine, to include details such as the username, location data, hardware configuration, and information regarding installed security software. More recent versions of RedLine added the ability to steal cryptocurrency. FTP and IM clients are also apparently targeted by this family, and this malware has the ability to upload and download files, execute commands, and periodically send back information about the infected computer.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://apophis133.medium.com/redline-technical-analysis-report-5034e16ad152 https://asec.ahnlab.com/en/30445/ https://asec.ahnlab.com/en/35981/ https://asec.ahnlab.com/ko/25837/	https://malpedia.caad.fkie.fraunhofer.de/details/win.redline_stealer

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\ndae	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
C:\Users\user\AppData\Local\Temp\ndae	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
C:\Users\user\AppData\Local\Temp\ndae	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xb864a:$s14: keybd_event 0xbf3b9:$v1_1: grabber@ 0xb921c:$v1_2: <BrowserProfile>k__ 0xb9c95:$v1_3: <SystemHardwares>k__ 0xb9d54:$v1_5: <ScannedWallets>k__ 0xb9de4:$v1_6: <DicrFiles>k__ 0xb9dc0:$v1_7: <MessageClientFiles>k__ 0xba18a:$v1_8: <ScanBrowsers>k__BackingField 0xba1dc:$v1_8: <ScanWallets>k__BackingField 0xba1f9:$v1_8: <ScanScreen>k__BackingField 0xba233:$v1_8: <ScanVPN>k__BackingField 0xaba62:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xab36e:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
C:\Users\user\AppData\Local\Temp\svubpwldttjkvt	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
C:\Users\user\AppData\Local\Temp\svubpwldttjkvt	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
C:\Users\user\AppData\Local\Temp\svubpwldttjkvt	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xb864a:$s14: keybd_event 0xbf3b9:$v1_1: grabber@ 0xb921c:$v1_2: <BrowserProfile>k__ 0xb9c95:$v1_3: <SystemHardwares>k__ 0xb9d54:$v1_5: <ScannedWallets>k__ 0xb9de4:$v1_6: <DicrFiles>k__ 0xb9dc0:$v1_7: <MessageClientFiles>k__ 0xba18a:$v1_8: <ScanBrowsers>k__BackingField 0xba1dc:$v1_8: <ScanWallets>k__BackingField 0xba1f9:$v1_8: <ScanScreen>k__BackingField 0xba233:$v1_8: <ScanVPN>k__BackingField 0xaba62:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xab36e:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
Click to see the 1 entries

Memory Dumps

Source	Rule	Description	Author
0000000E.00000002.2704945415.00000000056B0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000E.00000002.2704945415.00000000056B0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000011.00000002.2705147083.0000000000E22000.00000002.00000001.01000000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000011.00000002.2705147083.0000000000E22000.00000002.00000001.01000000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000007.00000002.2447289622.0000000005680000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000007.00000002.2447289622.0000000005680000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Process Memory Space: cmd.exe PID: 2672	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: cmd.exe PID: 2672	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Process Memory Space: cmd.exe PID: 2848	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: cmd.exe PID: 2848	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Process Memory Space: MSBuild.exe PID: 7156	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: MSBuild.exe PID: 7156	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Click to see the 7 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
7.2.cmd.exe.56800c8.7.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
7.2.cmd.exe.56800c8.7.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
7.2.cmd.exe.56800c8.7.unpack	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xb684a:$s14: keybd_event 0xbd5b9:$v1_1: grabber@ 0xb741c:$v1_2: <BrowserProfile>k__ 0xb7e95:$v1_3: <SystemHardwares>k__ 0xb7f54:$v1_5: <ScannedWallets>k__ 0xb7fe4:$v1_6: <DicrFiles>k__ 0xb7fc0:$v1_7: <MessageClientFiles>k__ 0xb838a:$v1_8: <ScanBrowsers>k__BackingField 0xb83dc:$v1_8: <ScanWallets>k__BackingField 0xb83f9:$v1_8: <ScanScreen>k__BackingField 0xb8433:$v1_8: <ScanVPN>k__BackingField 0xa9c62:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xa956e:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
14.2.cmd.exe.56b00c8.7.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
14.2.cmd.exe.56b00c8.7.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
7.2.cmd.exe.56800c8.7.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
7.2.cmd.exe.56800c8.7.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
14.2.cmd.exe.56b00c8.7.unpack	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xb684a:$s14: keybd_event 0xbd5b9:$v1_1: grabber@ 0xb741c:$v1_2: <BrowserProfile>k__ 0xb7e95:$v1_3: <SystemHardwares>k__ 0xb7f54:$v1_5: <ScannedWallets>k__ 0xb7fe4:$v1_6: <DicrFiles>k__ 0xb7fc0:$v1_7: <MessageClientFiles>k__ 0xb838a:$v1_8: <ScanBrowsers>k__BackingField 0xb83dc:$v1_8: <ScanWallets>k__BackingField 0xb83f9:$v1_8: <ScanScreen>k__BackingField 0xb8433:$v1_8: <ScanVPN>k__BackingField 0xa9c62:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xa956e:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
7.2.cmd.exe.56800c8.7.raw.unpack	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xb864a:$s14: keybd_event 0xbf3b9:$v1_1: grabber@ 0xb921c:$v1_2: <BrowserProfile>k__ 0xb9c95:$v1_3: <SystemHardwares>k__ 0xb9d54:$v1_5: <ScannedWallets>k__ 0xb9de4:$v1_6: <DicrFiles>k__ 0xb9dc0:$v1_7: <MessageClientFiles>k__ 0xba18a:$v1_8: <ScanBrowsers>k__BackingField 0xba1dc:$v1_8: <ScanWallets>k__BackingField 0xba1f9:$v1_8: <ScanScreen>k__BackingField 0xba233:$v1_8: <ScanVPN>k__BackingField 0xaba62:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xab36e:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
17.2.MSBuild.exe.e20000.0.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
17.2.MSBuild.exe.e20000.0.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
17.2.MSBuild.exe.e20000.0.unpack	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xb864a:$s14: keybd_event 0xbf3b9:$v1_1: grabber@ 0xb921c:$v1_2: <BrowserProfile>k__ 0xb9c95:$v1_3: <SystemHardwares>k__ 0xb9d54:$v1_5: <ScannedWallets>k__ 0xb9de4:$v1_6: <DicrFiles>k__ 0xb9dc0:$v1_7: <MessageClientFiles>k__ 0xba18a:$v1_8: <ScanBrowsers>k__BackingField 0xba1dc:$v1_8: <ScanWallets>k__BackingField 0xba1f9:$v1_8: <ScanScreen>k__BackingField 0xba233:$v1_8: <ScanVPN>k__BackingField 0xaba62:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xab36e:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
14.2.cmd.exe.56b00c8.7.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
14.2.cmd.exe.56b00c8.7.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
14.2.cmd.exe.56b00c8.7.raw.unpack	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xb864a:$s14: keybd_event 0xbf3b9:$v1_1: grabber@ 0xb921c:$v1_2: <BrowserProfile>k__ 0xb9c95:$v1_3: <SystemHardwares>k__ 0xb9d54:$v1_5: <ScannedWallets>k__ 0xb9de4:$v1_6: <DicrFiles>k__ 0xb9dc0:$v1_7: <MessageClientFiles>k__ 0xba18a:$v1_8: <ScanBrowsers>k__BackingField 0xba1dc:$v1_8: <ScanWallets>k__BackingField 0xba1f9:$v1_8: <ScanScreen>k__BackingField 0xba233:$v1_8: <ScanVPN>k__BackingField 0xaba62:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xab36e:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
Click to see the 10 entries

Suricata Signatures

ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T12:09:40.005424+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:40.117811+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:40.227908+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:40.336552+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:40.446062+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:40.555307+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:40.665740+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:40.774006+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:40.886453+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:40.992788+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:41.102299+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:41.211511+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:41.321737+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:41.430326+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:41.540439+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:41.649304+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:41.758400+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:41.867836+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:42.004819+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:42.117927+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:42.358989+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:42.461446+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:42.571745+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:42.680143+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:42.790030+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:42.898859+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:43.008443+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:43.117616+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:43.227238+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:43.336459+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:43.446356+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:43.555401+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:43.664718+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:43.774765+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:43.883546+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:43.992688+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:44.102542+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:44.211445+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:44.320990+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:44.430551+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:44.539636+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:44.648987+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:44.758936+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:44.867705+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:44.977218+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:45.086599+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:45.195941+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:45.305205+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:45.415115+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:45.524014+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:45.633412+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:45.742795+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:45.852152+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:45.962263+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:46.071848+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:46.180334+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:46.289827+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:46.416095+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:46.523984+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:46.633352+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:46.743294+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:46.852213+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:46.961506+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:47.070847+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:47.180182+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:47.289692+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:47.399614+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:47.508384+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:47.617741+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:47.727193+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:48.055828+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:48.165819+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:48.274106+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:48.383457+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:48.492839+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:48.602296+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:48.717545+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:48.821312+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:49.149087+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:49.258390+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:49.367797+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:49.480372+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:49.586501+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:49.695913+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:49.805296+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:49.914715+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:50.024011+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:50.134173+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:50.242783+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:50.352084+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:50.461507+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:50.570813+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:50.680254+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:50.790100+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:50.899124+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:51.008271+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:51.118088+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:51.227258+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:51.336435+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:51.446334+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:51.555174+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:51.664586+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:51.773945+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:51.884586+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:51.992678+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:52.102525+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:52.211430+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:52.320839+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:52.430258+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:52.539702+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:52.649030+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:52.758773+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:52.867663+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:52.977218+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:53.086473+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:53.195807+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:53.305193+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:53.414984+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:53.524055+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:53.633324+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:53.742715+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:53.852090+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:53.961582+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:54.071362+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:54.180325+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:54.289489+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:54.398893+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:54.508282+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:54.617688+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:54.728076+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:54.836578+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:54.963307+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:55.162580+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:55.274041+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:55.383320+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:55.493252+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:55.602111+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:55.711707+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:55.821460+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:55.930948+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:56.040045+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:56.149476+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:56.258428+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:56.368142+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:56.477151+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:56.586945+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:56.696030+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:56.805668+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:56.914627+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:57.024137+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:57.133455+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:57.246369+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:57.357891+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:57.473119+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:57.847733+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:58.023469+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:58.070832+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:58.182032+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:58.289634+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:58.399026+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:58.509574+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:58.617671+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:58.727093+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:58.836520+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:58.945853+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:59.055169+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:59.166040+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:59.273987+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:59.383335+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:59.492969+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:59.602164+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:59.711474+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:59.822658+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:59.930311+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:00.039728+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:00.152284+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:00.258355+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:00.367962+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:00.478694+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:00.586514+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:00.695832+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:00.805177+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:00.914568+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:01.023903+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:01.134486+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:01.242727+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:01.352057+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:01.461436+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:01.570868+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:01.680170+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:01.790805+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:01.898980+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:02.386891+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:02.398720+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:02.514274+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:02.617672+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:02.727125+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:02.836482+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:02.946287+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:03.055356+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:03.166067+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:03.274279+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:03.383288+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:03.492849+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:03.602176+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:03.713357+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:03.824721+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:03.930884+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:04.039675+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:04.149207+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:04.258382+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:04.368005+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:04.477871+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:04.586726+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:04.695983+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:04.805760+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:04.914874+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:05.024041+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:05.133877+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:05.242938+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:05.352293+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:05.461579+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:06.035704+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:06.149193+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:06.258396+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:06.367689+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:06.477069+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:06.587207+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:06.695800+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:06.805548+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:06.914800+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:07.025057+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:07.133480+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:07.461583+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:07.570948+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:07.680344+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:07.789692+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:07.899515+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:08.010765+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:08.117729+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:08.227152+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:08.336739+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:08.446052+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:08.555863+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:08.665777+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:08.774238+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:08.883497+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:08.992821+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:09.102170+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:09.212146+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:09.322587+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:09.430270+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:09.539627+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:09.649810+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:09.758281+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:09.868351+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:09.978567+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:10.086439+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:10.195806+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:10.305323+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:10.414599+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:10.524363+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:10.634481+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:10.742911+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:10.852250+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:10.961510+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:11.070883+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:11.183583+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:11.290367+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:11.399033+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:11.509247+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:11.617951+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:11.727184+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:11.837019+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:11.946716+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:12.055241+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:12.164575+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:12.273946+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:12.383312+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:12.493258+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:12.602957+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:12.711493+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:12.820839+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:12.933969+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:13.039676+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:13.149555+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:13.258713+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:13.367778+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:13.477060+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:13.586438+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:13.695839+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:13.805661+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:13.914791+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:14.023989+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:14.133437+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:14.242972+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:14.352121+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:14.462002+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:14.578254+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:14.686178+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:14.790585+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:14.899077+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:15.008349+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:15.117669+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:15.227457+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:15.336440+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:15.445923+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:15.555359+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:15.664590+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:15.758470+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:15.852490+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:15.946519+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.039611+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.133453+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.227115+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.326188+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.430910+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.524003+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.617781+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.711431+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.805357+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.899041+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.993121+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:17.086467+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:17.180215+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:17.273916+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:17.367665+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:17.461546+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:17.555895+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:17.649055+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:17.742697+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:17.836556+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:17.930205+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.024041+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.118117+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.211513+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.305173+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.399717+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.492806+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.586571+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.680521+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.774018+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.867890+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.961538+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.055531+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.149159+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.243274+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.336775+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.430321+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.524059+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.617846+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.711439+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.806080+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.899010+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.992666+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:20.086536+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:20.180376+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:20.273983+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:20.368043+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:20.461871+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:20.555343+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:20.648897+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:20.742722+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:20.836590+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:20.930714+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.008781+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.086551+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.164759+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.242786+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.323875+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.415200+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.492922+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.571025+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.648973+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.727148+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.807343+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.885539+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.961530+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.039768+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.117698+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.196016+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.273977+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.352602+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.430315+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.508685+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.586646+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.664616+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.742766+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.821333+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.899064+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.977425+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:23.055603+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:23.133482+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:23.213058+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:23.295100+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:23.368119+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:23.446110+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:23.527137+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:23.603116+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:23.680260+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:23.758317+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:23.838490+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:23.914666+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:23.992778+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.070822+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.148920+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.227257+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.306394+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.383276+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.461367+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.539603+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.617945+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.695920+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.775486+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.852017+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.930301+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.008669+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.086580+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.164773+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.244343+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.320915+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.399008+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.477062+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.555435+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.634025+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.713177+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.789674+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.867845+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.949378+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.024083+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.086835+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.166079+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.242947+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.328351+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.399112+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.461858+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.524361+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.588155+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.667433+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.742801+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.805418+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.867850+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.930267+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.994472+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:27.055487+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:27.124584+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:27.195847+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:27.258509+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:27.660315+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:27.674852+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:27.834859+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:27.922046+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:27.992924+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.055347+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.117815+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.180363+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.242708+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.306390+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.367801+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.430199+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.492843+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.555346+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.618013+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.681407+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.742687+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.805243+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.867754+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.930335+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.992711+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.056517+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.120380+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.180303+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.242785+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.305364+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.367765+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.431421+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.492812+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.555178+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.617662+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.680228+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.742807+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.806408+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.867669+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.930258+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.992730+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.055357+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.117839+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.181877+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.242801+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.326164+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.383332+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.447691+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.508740+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.584131+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.648950+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.711513+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.774002+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.836901+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.899133+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.962806+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.024082+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.086431+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.149228+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.211480+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.274006+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.338583+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.398954+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.461395+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.524946+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.586596+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.648934+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.712870+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.773941+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.841993+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:31.898940+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:32.963416+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.009411+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.055745+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.102583+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.149149+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.195897+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.243418+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.289630+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.336546+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.383323+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.430196+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.477089+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.524518+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.571074+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.618133+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.664710+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.711515+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.758389+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.805985+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.852321+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.195910+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.242860+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.289707+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.336777+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.383392+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.431065+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.477240+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.523953+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.570881+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.620224+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.664827+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.712366+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.758696+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.805396+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.852224+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.898967+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.945871+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.993292+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.039703+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.086467+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.133653+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.180189+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.227164+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.274681+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.320869+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.367841+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.414791+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.461606+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.508343+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.555850+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.602183+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.649071+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.695881+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.742735+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.789764+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.836995+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.883477+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.930345+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.977228+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.024043+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.070906+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.118674+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.164785+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.211581+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.258417+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.305399+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.352079+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.399732+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.445907+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.492887+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.539713+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.586603+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.633425+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.680914+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.727223+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.774228+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.821105+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.867765+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.914762+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.961995+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.008478+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.055269+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.102139+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.149104+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.196053+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.243249+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.289572+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.336522+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.383455+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.430424+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.477094+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.509128+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.555193+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.586443+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.617751+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.649036+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.695907+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.743435+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.789678+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.836564+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.867973+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.899187+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.930671+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.962121+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.992822+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.023966+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.055212+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.086969+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.117806+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.149658+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.180344+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.211527+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.242756+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.273991+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.305347+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.336998+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.367678+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.398973+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.430382+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.461738+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.493038+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.524852+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.557716+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.586538+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.617796+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.649134+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.680258+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.141593+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.236520+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.282118+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.321720+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.362463+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.401190+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.451190+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.503232+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.539809+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.570980+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.602110+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.633407+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.665135+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.696775+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.727023+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.764439+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.789914+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.822270+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.853004+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.884392+0200	2051910	1	A Network Trojan was detected	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:40.451828+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.477658+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.508463+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.539703+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.645341+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.665081+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.695870+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.727172+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.758411+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.789566+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.821263+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.852786+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.883770+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.938411+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.966719+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.977277+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.008372+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.040271+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.071056+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.102224+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.133463+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.164709+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.220783+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.250888+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.258493+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.289832+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.323641+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.354104+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.459806+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.482117+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.508571+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.540063+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.570898+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.613754+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.649266+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.680424+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.711600+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.742813+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.798246+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.837923+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.866214+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:42.992812+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.024028+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.055785+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.086433+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.117672+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.149049+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.180305+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.211664+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.243126+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.274045+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.305280+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.337036+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.367836+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.399082+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.430859+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.461461+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.492715+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.524041+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.555251+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.586725+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.618206+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.649023+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.680279+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.711470+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.742696+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.773939+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.805851+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.836507+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.867832+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.899469+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.932399+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.961486+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.993224+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.023973+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.055435+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.086573+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.117726+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.149080+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.180678+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.211441+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.242931+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.274048+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.305427+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.336621+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.368167+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.399117+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.436027+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.472210+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.495057+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.524235+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.548666+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.570988+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.587250+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.617888+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.633362+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.649104+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.665310+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.695831+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.711394+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.727085+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.742977+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.758391+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.775012+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:49.076368+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.086646+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.102095+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.117688+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.133732+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.148969+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.164636+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.180232+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.195836+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.211375+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.227509+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.242698+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.258539+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.273960+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.289657+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.305162+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.321306+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.336403+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.352019+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.367764+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.383270+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.400524+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.415125+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.430212+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.445820+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.461620+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.477103+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.492835+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.508640+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.523997+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.539594+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.555116+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.570816+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.586421+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.602584+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.617637+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.633245+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.648898+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.664542+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.680212+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.696409+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.711419+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.727047+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.742646+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.758311+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.774061+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.789911+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.805319+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.820771+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.838708+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.866588+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.899065+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.914617+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.936541+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.955578+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.961784+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.977384+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:50.146116+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.164733+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.190739+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.203991+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.212667+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.227326+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.243014+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.259310+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.277505+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.295334+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.305798+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.320864+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.336746+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.352101+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.368096+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.384013+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.399110+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.414630+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.430363+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.445811+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.463089+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.477404+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.492658+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.510929+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.604261+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.617687+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.633256+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.649165+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.664902+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.680255+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.695822+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.711400+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.727110+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.742987+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.758829+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.773956+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.790509+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.805492+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.820799+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.836866+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.852822+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.867781+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.883447+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.908857+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:51.024573+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:51.039977+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:51.055162+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:51.070851+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:51.086421+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:54.543250+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.555985+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.571218+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.586586+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.602047+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.617706+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.633342+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.649001+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.664996+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.680152+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.696065+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.711402+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.727893+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.742661+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.758677+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.773914+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.789772+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.805247+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.822487+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.836429+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.852597+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.867669+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.883508+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.898943+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.915574+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.930379+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.946346+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.961517+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.977286+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.992702+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.009133+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.023915+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.041186+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.055246+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.070844+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.086439+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.102029+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.117655+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.134582+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.163831+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.214993+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.227581+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.242786+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.258567+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.274536+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.289694+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.306060+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.321271+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.336389+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.352103+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.368064+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.385153+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.399903+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.415238+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.430520+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.445850+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.461662+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.477041+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.493599+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.509003+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.523958+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.549403+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.639956+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.648905+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.664504+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.733880+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.742872+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.758440+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.773940+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.790264+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.805228+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.820893+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.837376+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.855009+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.868526+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.884762+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.899981+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.916008+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.933432+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.959529+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.106940+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.119208+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.133282+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.158575+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.199191+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.214864+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.228005+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.244499+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.261492+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.279478+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.294563+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.305540+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.323698+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.342565+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.391975+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.404738+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.424515+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.431732+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.446837+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.464525+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.479453+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.495131+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.508802+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.524235+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:11:03.051239+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61005	91.240.118.154	15647	TCP
2024-10-18T12:11:03.122890+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61005	91.240.118.154	15647	TCP
2024-10-18T12:11:03.377525+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61005	91.240.118.154	15647	TCP
2024-10-18T12:11:03.490615+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61005	91.240.118.154	15647	TCP
2024-10-18T12:11:03.674154+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61005	91.240.118.154	15647	TCP
2024-10-18T12:11:04.118293+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61005	91.240.118.154	15647	TCP
2024-10-18T12:11:11.603871+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61006	91.240.118.154	15647	TCP
2024-10-18T12:11:11.907622+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61006	91.240.118.154	15647	TCP
2024-10-18T12:11:11.944144+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61006	91.240.118.154	15647	TCP
2024-10-18T12:11:12.669389+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61006	91.240.118.154	15647	TCP
2024-10-18T12:11:14.889458+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61006	91.240.118.154	15647	TCP
2024-10-18T12:11:15.173499+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61006	91.240.118.154	15647	TCP
2024-10-18T12:11:20.094013+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61007	91.240.118.154	15647	TCP
2024-10-18T12:11:20.109646+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61007	91.240.118.154	15647	TCP
2024-10-18T12:11:20.119637+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61007	91.240.118.154	15647	TCP
2024-10-18T12:11:20.159430+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61007	91.240.118.154	15647	TCP
2024-10-18T12:11:20.408909+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61007	91.240.118.154	15647	TCP
2024-10-18T12:11:20.419111+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61007	91.240.118.154	15647	TCP
2024-10-18T12:11:20.510241+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61007	91.240.118.154	15647	TCP
2024-10-18T12:11:20.546571+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61007	91.240.118.154	15647	TCP
2024-10-18T12:11:28.607467+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61008	91.240.118.154	15647	TCP
2024-10-18T12:11:28.747536+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61008	91.240.118.154	15647	TCP
2024-10-18T12:11:28.876481+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61008	91.240.118.154	15647	TCP
2024-10-18T12:11:28.998280+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61008	91.240.118.154	15647	TCP
2024-10-18T12:11:37.096972+0200	2051910	1	A Network Trojan was detected	192.168.2.6	61010	91.240.118.154	15647	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\svubpwldttjkvt	Avira: detection malicious, Label: TR/Agent.skcyd
Source: C:\Users\user\AppData\Local\Temp\ndae	Avira: detection malicious, Label: TR/Agent.skcyd

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Ormolu\dbghelp.dll	ReversingLabs: Detection: 41%
Source: C:\Users\user\AppData\Local\Temp\ndae	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\Temp\svubpwldttjkvt	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\dbghelp.dll	ReversingLabs: Detection: 41%

Multi AV Scanner detection for submitted file

Source: iieCxV2b1n.msi

ReversingLabs: Detection: 28%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\svubpwldttjkvt	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\ndae	Joe Sandbox ML: detected

Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.6:60716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.6:60762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.6:60907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.6:60927 version: TLS 1.2

Source:	Binary string: d:\branch_2.5\bin\cximagecrt.pdb0 source: ManyCam.exe, 00000003.00000002.2166338310.0000000010062000.00000002.00000001.01000000.00000004.sdmp, ManyCam.exe, 00000005.00000002.2219366899.0000000010062000.00000002.00000001.01000000.0000000C.sdmp, ManyCam.exe, 0000000C.00000002.2466630485.0000000010062000.00000002.00000001.01000000.0000000C.sdmp, cximagecrt.dll.2.dr, cximagecrt.dll.3.dr
Source:	Binary string: d:\branch_2.5\bin\cximagecrt.pdb source: ManyCam.exe, 00000003.00000002.2166338310.0000000010062000.00000002.00000001.01000000.00000004.sdmp, ManyCam.exe, 00000005.00000002.2219366899.0000000010062000.00000002.00000001.01000000.0000000C.sdmp, ManyCam.exe, 0000000C.00000002.2466630485.0000000010062000.00000002.00000001.01000000.0000000C.sdmp, cximagecrt.dll.2.dr, cximagecrt.dll.3.dr
Source:	Binary string: c:\Program Files\OpenCV\bin\highgui099.pdb8` source: ManyCam.exe, 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmp, ManyCam.exe, 00000005.00000002.2217621375.000000000188D000.00000002.00000001.01000000.00000011.sdmp, ManyCam.exe, 0000000C.00000002.2464370715.0000000000BDD000.00000002.00000001.01000000.00000011.sdmp, highgui099.dll.2.dr, highgui099.dll.3.dr
Source:	Binary string: c:\Program Files\OpenCV\bin\cxcore099.pdb source: ManyCam.exe, 00000003.00000002.2162452316.0000000000CE1000.00000002.00000001.01000000.00000007.sdmp, ManyCam.exe, 00000005.00000002.2217079654.0000000000C11000.00000002.00000001.01000000.0000000D.sdmp, ManyCam.exe, 0000000C.00000002.2464752763.00000000012D1000.00000002.00000001.01000000.0000000D.sdmp, cxcore099.dll.2.dr
Source:	Binary string: diaLocatePDB-> Looking for %s... %s%s.pdbFPOPDATAXDATAOMAPFROMOMAPTO$$$IP not set! source: dbghelp.dll.2.dr
Source:	Binary string: wntdll.pdbUGP source: ManyCam.exe, 00000003.00000002.2165395088.00000000043F2000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000003.00000002.2165697387.0000000004750000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218603345.0000000003F27000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218926566.0000000004633000.00000004.00000001.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218747581.0000000004280000.00000004.00000800.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446861312.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446634321.00000000048B7000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465924719.000000000461D000.00000004.00000001.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465716029.0000000004260000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465598920.0000000003F0F000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704424826.0000000004CE2000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704694294.00000000051D0000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: ManyCam.exe, 00000003.00000002.2165395088.00000000043F2000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000003.00000002.2165697387.0000000004750000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218603345.0000000003F27000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218926566.0000000004633000.00000004.00000001.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218747581.0000000004280000.00000004.00000800.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446861312.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446634321.00000000048B7000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465924719.000000000461D000.00000004.00000001.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465716029.0000000004260000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465598920.0000000003F0F000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704424826.0000000004CE2000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704694294.00000000051D0000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: c:\Program Files\OpenCV\bin\highgui099.pdb source: ManyCam.exe, 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmp, ManyCam.exe, 00000005.00000002.2217621375.000000000188D000.00000002.00000001.01000000.00000011.sdmp, ManyCam.exe, 0000000C.00000002.2464370715.0000000000BDD000.00000002.00000001.01000000.00000011.sdmp, highgui099.dll.2.dr, highgui099.dll.3.dr
Source:	Binary string: c:\Program Files\OpenCV\bin\cv099.pdb source: ManyCam.exe, 00000003.00000003.2158670135.0000000000E96000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000003.00000002.2162785863.0000000000DAF000.00000002.00000001.01000000.00000008.sdmp, ManyCam.exe, 00000005.00000002.2217487218.000000000181F000.00000002.00000001.01000000.0000000E.sdmp, ManyCam.exe, 0000000C.00000002.2464881665.000000000139F000.00000002.00000001.01000000.0000000E.sdmp
Source:	Binary string: c:\Program Files\OpenCV\bin\cxcore099.pdbu source: ManyCam.exe, 00000003.00000002.2162452316.0000000000CE1000.00000002.00000001.01000000.00000007.sdmp, ManyCam.exe, 00000005.00000002.2217079654.0000000000C11000.00000002.00000001.01000000.0000000D.sdmp, ManyCam.exe, 0000000C.00000002.2464752763.00000000012D1000.00000002.00000001.01000000.0000000D.sdmp, cxcore099.dll.2.dr
Source:	Binary string: d:\branch_2.5\bin\ManyCam.pdb source: ManyCam.exe, 00000003.00000000.2152038111.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr
Source:	Binary string: d:\branch_2.5\Bin\CrashRpt.pdb source: ManyCam.exe, 00000003.00000002.2163554374.0000000002012000.00000002.00000001.01000000.00000005.sdmp, ManyCam.exe, 00000005.00000002.2217973739.0000000002012000.00000002.00000001.01000000.0000000F.sdmp, ManyCam.exe, 0000000C.00000002.2465124087.0000000002012000.00000002.00000001.01000000.0000000F.sdmp
Source:	Binary string: dbghelp.pdb source: ManyCam.exe, 00000003.00000002.2166506067.000000006D511000.00000020.00000001.01000000.00000006.sdmp, ManyCam.exe, 00000005.00000002.2219442160.000000006D511000.00000020.00000001.01000000.00000010.sdmp, ManyCam.exe, 0000000C.00000002.2466696009.000000006D511000.00000020.00000001.01000000.00000010.sdmp, dbghelp.dll.2.dr

Source: C:\Windows\System32\msiexec.exe	File opened: z:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: x:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: v:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: t:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: r:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: p:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: n:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: l:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: j:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: h:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: f:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: b:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: y:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: w:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: u:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: s:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: q:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: o:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: m:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: k:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: i:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: g:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: e:	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: c:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: a:	Jump to behavior

Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_004164A0 lstrlenW,FindFirstFileW,GetFullPathNameW,SetLastError,		3_2_004164A0
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_004164A0 lstrlenW,FindFirstFileW,GetFullPathNameW,SetLastError,		5_2_004164A0

Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Roaming\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\	Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:60851 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:60897 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:60942 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:60989 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:60996 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:60997 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:60999 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:61000 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:61002 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:61003 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:61005 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:61006 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:61001 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:61007 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:61008 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:61010 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:61011 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:61012 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:61013 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:61014 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:61015 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:61016 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:61017 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:61018 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:61019 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:61022 -> 91.240.118.154:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.6:61021 -> 91.240.118.154:15647

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 91.240.118.154 ports 1,4,5,6,7,15647

Source: global traffic

TCP traffic: 192.168.2.6:60851 -> 91.240.118.154:15647

Source: Joe Sandbox View

ASN Name: GLOBALLAYERNL GLOBALLAYERNL

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154
Source: unknown	TCP traffic detected without corresponding DNS query: 91.240.118.154

Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt0
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDCodeSigningCA-1.crt0
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl08
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/assured-cs-g1.crl00
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/sha2-assured-ts.crl02
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl0w
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/assured-cs-g1.crl0L
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/sha2-assured-ts.crl0
Source: ManyCam.exe, 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000000.2161245446.00000000005A4000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409060950.00000000005A4000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	String found in binary or memory: http://download.manycam.com
Source: ManyCam.exe, 00000003.00000000.2152038111.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	String found in binary or memory: http://download.manycam.com/effects/%s/%s?v=%sBackgroundsDynamicDynamic
Source: ManyCam.exe, 00000003.00000000.2152038111.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	String found in binary or memory: http://download.manycam.com/effects/%s/%s?v=%sManyCam
Source: ManyCam.exe, 00000003.00000000.2152038111.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	String found in binary or memory: http://download.manycam.comNew
Source: ManyCam.exe, 00000003.00000000.2152038111.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	String found in binary or memory: http://download.manycam.comVerdanaThis
Source: ManyCam.exe	String found in binary or memory: http://manycam.com/feedback/?version=%s
Source: ManyCam.exe, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	String found in binary or memory: http://manycam.com/help/effects
Source: ManyCam.exe, 00000003.00000000.2152038111.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	String found in binary or memory: http://manycam.com/upload_effect?filepath=ManyCam
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0A
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0C
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0L
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0O
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://s1.symcb.com/pca3-g5.crl0
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://s2.symcb.com0
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://sv.symcb.com/sv.crl0a
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://sv.symcb.com/sv.crt0
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://sv.symcd.com0&
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/ssl-cps-repository.htm0
Source: ManyCam.exe, 00000003.00000002.2164898141.0000000004268000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003D8F000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C10000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003D70000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.000000000504F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.info-zip.org/
Source: ManyCam.exe, ManyCam.exe, 00000005.00000000.2161245446.00000000005A4000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409060950.00000000005A4000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	String found in binary or memory: http://www.manycam.com
Source: ManyCam.exe, ManyCam.exe, 00000005.00000000.2161245446.00000000005A4000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409060950.00000000005A4000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	String found in binary or memory: http://www.manycam.com/codec
Source: ManyCam.exe, 00000003.00000000.2152038111.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	String found in binary or memory: http://www.manycam.com/codecVerdanaThis
Source: ManyCam.exe, 00000003.00000000.2152038111.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	String found in binary or memory: http://www.manycam.com/codecVerdanaTo
Source: ManyCam.exe, 00000003.00000000.2152038111.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	String found in binary or memory: http://www.manycam.com/help/effects/snapshot/these
Source: cximagecrt.dll.2.dr, cximagecrt.dll.3.dr, ManyCam.exe.2.dr, ManyCam.exe.3.dr	String found in binary or memory: http://www.manycam.com0
Source: ManyCam.exe, 00000003.00000000.2152038111.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	String found in binary or memory: http://www.manycam.comhttp://manycam.com/feedback/?version=%sAnchor
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.symauth.com/cps0(
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.symauth.com/rpa00
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.vmware.com/0
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.vmware.com/0/
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://d.symcb.com/cps0%
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://d.symcb.com/rpa0
Source: MSBuild.exe, 00000011.00000002.2705928640.0000000002EC1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pastebin.com/raw/TeiUkREy
Source: MSBuild.exe, 00000011.00000002.2705928640.0000000002EC1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pastebin.com/raw/TeiUkREyPO
Source: ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.digicert.com/CPS0

Source: unknown	Network traffic detected: HTTP traffic on port 60850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60772
Source: unknown	Network traffic detected: HTTP traffic on port 60838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60770
Source: unknown	Network traffic detected: HTTP traffic on port 60815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60890
Source: unknown	Network traffic detected: HTTP traffic on port 60735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60896
Source: unknown	Network traffic detected: HTTP traffic on port 60849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60782
Source: unknown	Network traffic detected: HTTP traffic on port 60862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60780
Source: unknown	Network traffic detected: HTTP traffic on port 60965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60787
Source: unknown	Network traffic detected: HTTP traffic on port 60770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60786
Source: unknown	Network traffic detected: HTTP traffic on port 60907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60793
Source: unknown	Network traffic detected: HTTP traffic on port 60861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60791
Source: unknown	Network traffic detected: HTTP traffic on port 60941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60798
Source: unknown	Network traffic detected: HTTP traffic on port 60884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60797
Source: unknown	Network traffic detected: HTTP traffic on port 60952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60739
Source: unknown	Network traffic detected: HTTP traffic on port 60928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60971
Source: unknown	Network traffic detected: HTTP traffic on port 60863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60970
Source: unknown	Network traffic detected: HTTP traffic on port 60840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60852
Source: unknown	Network traffic detected: HTTP traffic on port 60886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60973
Source: unknown	Network traffic detected: HTTP traffic on port 60839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60980
Source: unknown	Network traffic detected: HTTP traffic on port 60916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60868
Source: unknown	Network traffic detected: HTTP traffic on port 60940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60987
Source: unknown	Network traffic detected: HTTP traffic on port 60757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60986
Source: unknown	Network traffic detected: HTTP traffic on port 60736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60984
Source: unknown	Network traffic detected: HTTP traffic on port 60978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60990
Source: unknown	Network traffic detected: HTTP traffic on port 60917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60995
Source: unknown	Network traffic detected: HTTP traffic on port 60801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60882
Source: unknown	Network traffic detected: HTTP traffic on port 60967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60880
Source: unknown	Network traffic detected: HTTP traffic on port 60990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60764
Source: unknown	Network traffic detected: HTTP traffic on port 60885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60885
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60937
Source: unknown	Network traffic detected: HTTP traffic on port 60915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60936
Source: unknown	Network traffic detected: HTTP traffic on port 60938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60812
Source: unknown	Network traffic detected: HTTP traffic on port 60829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60810
Source: unknown	Network traffic detected: HTTP traffic on port 60750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60931
Source: unknown	Network traffic detected: HTTP traffic on port 60773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60930
Source: unknown	Network traffic detected: HTTP traffic on port 60979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60828
Source: unknown	Network traffic detected: HTTP traffic on port 60927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60827
Source: unknown	Network traffic detected: HTTP traffic on port 60830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60948
Source: unknown	Network traffic detected: HTTP traffic on port 60784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60821
Source: unknown	Network traffic detected: HTTP traffic on port 60887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60940
Source: unknown	Network traffic detected: HTTP traffic on port 60800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60839
Source: unknown	Network traffic detected: HTTP traffic on port 60980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60959
Source: unknown	Network traffic detected: HTTP traffic on port 60961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60950
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60837
Source: unknown	Network traffic detected: HTTP traffic on port 60926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60836
Source: unknown	Network traffic detected: HTTP traffic on port 60842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60849
Source: unknown	Network traffic detected: HTTP traffic on port 60853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60845
Source: unknown	Network traffic detected: HTTP traffic on port 60904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60844
Source: unknown	Network traffic detected: HTTP traffic on port 60864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60722
Source: unknown	Network traffic detected: HTTP traffic on port 60751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60962
Source: unknown	Network traffic detected: HTTP traffic on port 60716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60907
Source: unknown	Network traffic detected: HTTP traffic on port 60960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60904
Source: unknown	Network traffic detected: HTTP traffic on port 60937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60903
Source: unknown	Network traffic detected: HTTP traffic on port 60866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60901
Source: unknown	Network traffic detected: HTTP traffic on port 60795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60918
Source: unknown	Network traffic detected: HTTP traffic on port 60959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60915
Source: unknown	Network traffic detected: HTTP traffic on port 60936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60913

Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.6:60716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.6:60762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.6:60907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.6:60927 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: 7.2.cmd.exe.56800c8.7.unpack, type: UNPACKEDPE	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: 14.2.cmd.exe.56b00c8.7.unpack, type: UNPACKEDPE	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: 7.2.cmd.exe.56800c8.7.raw.unpack, type: UNPACKEDPE	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: 17.2.MSBuild.exe.e20000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: 14.2.cmd.exe.56b00c8.7.raw.unpack, type: UNPACKEDPE	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: C:\Users\user\AppData\Local\Temp\ndae, type: DROPPED	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: C:\Users\user\AppData\Local\Temp\svubpwldttjkvt, type: DROPPED	Matched rule: Detects Arechclient2 RAT Author: ditekSHen

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Process Stats: CPU usage > 49%

Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\6c18e9.msi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\inprogressinstallinfo.ipi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\SourceHash{39F520E4-6237-4FBB-8F2E-71C60962EC87}	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI1A22.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\6c18eb.msi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\6c18eb.msi	Jump to behavior

Source: C:\Windows\System32\msiexec.exe

File deleted: C:\Windows\Installer\6c18eb.msi

Jump to behavior

Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_0050EC90	3_2_0050EC90
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BC31B0	3_2_00BC31B0
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BE619B	3_2_00BE619B
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BEB1E0	3_2_00BEB1E0
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BE01C0	3_2_00BE01C0
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BE91C0	3_2_00BE91C0
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BDB130	3_2_00BDB130
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BC7200	3_2_00BC7200
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BB8380	3_2_00BB8380
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BCE340	3_2_00BCE340
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BC7430	3_2_00BC7430
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BD1410	3_2_00BD1410
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BE640B	3_2_00BE640B
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BD35A0	3_2_00BD35A0
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BC55F0	3_2_00BC55F0
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BD85E2	3_2_00BD85E2
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BC6560	3_2_00BC6560
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BCE680	3_2_00BCE680
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BD26F0	3_2_00BD26F0
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BD16C0	3_2_00BD16C0
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BD7660	3_2_00BD7660
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BE9650	3_2_00BE9650
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BE57D0	3_2_00BE57D0
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BDB720	3_2_00BDB720
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BE8740	3_2_00BE8740
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BB78C0	3_2_00BB78C0
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BC6986	3_2_00BC6986
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BB0930	3_2_00BB0930
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BC7920	3_2_00BC7920
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BD9AF0	3_2_00BD9AF0
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BDBAE0	3_2_00BDBAE0
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BD7A10	3_2_00BD7A10
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BEABB0	3_2_00BEABB0
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BE9B00	3_2_00BE9B00
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BE8CF0	3_2_00BE8CF0
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BDEC10	3_2_00BDEC10
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BE5C10	3_2_00BE5C10
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BC3C40	3_2_00BC3C40
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BC5E3B	3_2_00BC5E3B
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BC4E30	3_2_00BC4E30
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BC6E10	3_2_00BC6E10
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BD7FB0	3_2_00BD7FB0
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_0050EC90	5_2_0050EC90
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00B7C0D0	5_2_00B7C0D0
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BD00D0	5_2_00BD00D0
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BB0180	5_2_00BB0180
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BAE120	5_2_00BAE120
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BCE110	5_2_00BCE110
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00C002C0	5_2_00C002C0
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00B662A0	5_2_00B662A0
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00B7E2A0	5_2_00B7E2A0
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BA02A0	5_2_00BA02A0
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00B682F0	5_2_00B682F0
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00B642C0	5_2_00B642C0
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BD2230	5_2_00BD2230
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BB0209	5_2_00BB0209
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BFE240	5_2_00BFE240
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BF83B0	5_2_00BF83B0
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00B863A7	5_2_00B863A7
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BFC360	5_2_00BFC360
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00C0E4D0	5_2_00C0E4D0
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BC04F0	5_2_00BC04F0
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00B7E5A0	5_2_00B7E5A0
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BFE5A0	5_2_00BFE5A0
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BC65F0	5_2_00BC65F0
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BEA523	5_2_00BEA523
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BE46B3	5_2_00BE46B3
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00B886A9	5_2_00B886A9
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00B666E0	5_2_00B666E0
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00B7A6CE	5_2_00B7A6CE
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BBC670	5_2_00BBC670
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BC4660	5_2_00BC4660
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00B7A650	5_2_00B7A650
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00C0C790	5_2_00C0C790
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BA4710	5_2_00BA4710
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BC8700	5_2_00BC8700
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00B7E8B0	5_2_00B7E8B0
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BAA890	5_2_00BAA890
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00B7A88E	5_2_00B7A88E
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BDA883	5_2_00BDA883
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00B848F8	5_2_00B848F8
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00BCA8E0	5_2_00BCA8E0
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00B7A810	5_2_00B7A810

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Ormolu\CrashRpt.dll C28E0AEC124902E948C554436C0EBBEBBA9FC91C906CE2CD887FADA0C64E3386
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe 7C4EB51A737A81C163F95B50EC54518B82FCF91389D0560E855F3E26CEC07282

Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: String function: 00416740 appears 60 times
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: String function: 00BCB4C0 appears 173 times
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: String function: 00BD2CB0 appears 120 times
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: String function: 00BCB420 appears 78 times
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: String function: 004B77A0 appears 100 times
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: String function: 004B76D0 appears 36 times
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: String function: 0047BCF0 appears 141 times
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: String function: 00BA6DF0 appears 231 times
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: String function: 00416740 appears 90 times
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: String function: 004B77A0 appears 101 times
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: String function: 004B76D0 appears 36 times
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: String function: 0041A3B0 appears 36 times
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: String function: 0047BCF0 appears 141 times

Source: CrashRpt.dll.2.dr	Static PE information: Resource name: RT_VERSION type: COM executable for DOS
Source: CrashRpt.dll.3.dr	Static PE information: Resource name: RT_VERSION type: COM executable for DOS

Source: 7.2.cmd.exe.56800c8.7.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: 14.2.cmd.exe.56b00c8.7.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: 7.2.cmd.exe.56800c8.7.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: 17.2.MSBuild.exe.e20000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: 14.2.cmd.exe.56b00c8.7.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: C:\Users\user\AppData\Local\Temp\ndae, type: DROPPED	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: C:\Users\user\AppData\Local\Temp\svubpwldttjkvt, type: DROPPED	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT

Source: 7.2.cmd.exe.56800c8.7.raw.unpack, -Module-.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 14.2.cmd.exe.56b00c8.7.raw.unpack, -Module-.cs	Cryptographic APIs: 'CreateDecryptor'

Source: rsjddfw.2.dr, rsjddfw.3.dr

Binary or memory string: Q.slN

Source: classification engine

Classification label: mal100.troj.evad.winMSI@23/43@0/1

Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe

Code function: 3_2_004B7920 GetLastError,FormatMessageW,GlobalFree,

3_2_004B7920

Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe

Code function: 3_2_004B2100 CoCreateInstance,

3_2_004B2100

Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe

Code function: 3_2_00488A00 FindResourceW,GetLastError,SizeofResource,GetLastError,GetLastError,

3_2_00488A00

Source: C:\Windows\System32\msiexec.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\CML1A51.tmp

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Mutant created: \Sessions\1\BaseNamedObjects\4a883fd97a304d9aac790bba9e5560e1
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2308:120:WilError_03

Source: C:\Windows\System32\msiexec.exe

File created: C:\Windows\TEMP\~DF3044E6FF2211BFB4.TMP

Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: iieCxV2b1n.msi

Static file information: TRID: Microsoft Windows Installer (60509/1) 88.31%

Source: iieCxV2b1n.msi

ReversingLabs: Detection: 28%

Source: unknown	Process created: C:\Windows\System32\msiexec.exe "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\iieCxV2b1n.msi"
Source: unknown	Process created: C:\Windows\System32\msiexec.exe C:\Windows\system32\msiexec.exe /V
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe "C:\Users\user\AppData\Local\Ormolu\ManyCam.exe"
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Process created: C:\Windows\System32\pcaui.exe "C:\Windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {bce4b583-343f-44b8-8f95-9f76104077b9} -a "ManyCam" -v "ManyCam LLC" -s "To work properly, this app must be reinstalled after you upgrade Windows." -n 4 -f 0 -k 0 -e "C:\Users\user\AppData\Local\Ormolu\ManyCam.exe"
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Process created: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Process created: C:\Windows\System32\pcaui.exe "C:\Windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {bce4b583-343f-44b8-8f95-9f76104077b9} -a "ManyCam" -v "ManyCam LLC" -s "To work properly, this app must be reinstalled after you upgrade Windows." -n 4 -f 0 -k 0 -e "C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe"
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Source: unknown	Process created: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe "C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe"
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Process created: C:\Windows\System32\pcaui.exe "C:\Windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {bce4b583-343f-44b8-8f95-9f76104077b9} -a "ManyCam" -v "ManyCam LLC" -s "To work properly, this app must be reinstalled after you upgrade Windows." -n 4 -f 0 -k 0 -e "C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe"
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe "C:\Users\user\AppData\Local\Ormolu\ManyCam.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Process created: C:\Windows\System32\pcaui.exe "C:\Windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {bce4b583-343f-44b8-8f95-9f76104077b9} -a "ManyCam" -v "ManyCam LLC" -s "To work properly, this app must be reinstalled after you upgrade Windows." -n 4 -f 0 -k 0 -e "C:\Users\user\AppData\Local\Ormolu\ManyCam.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Process created: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Process created: C:\Windows\System32\pcaui.exe "C:\Windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {bce4b583-343f-44b8-8f95-9f76104077b9} -a "ManyCam" -v "ManyCam LLC" -s "To work properly, this app must be reinstalled after you upgrade Windows." -n 4 -f 0 -k 0 -e "C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe"	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Process created: C:\Windows\System32\pcaui.exe "C:\Windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {bce4b583-343f-44b8-8f95-9f76104077b9} -a "ManyCam" -v "ManyCam LLC" -s "To work properly, this app must be reinstalled after you upgrade Windows." -n 4 -f 0 -k 0 -e "C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe"	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msihnd.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srclient.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: spp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vssapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vsstrace.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: cximagecrt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: cxcore099.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: cv099.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: highgui099.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: crashrpt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: opengl32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: glu32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: glu32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: avifil32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: avicap32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: ippopencv099.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: ippopencv097.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: ippcv-5.1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: ippcv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: ippcv20.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: ippi-5.1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: ippi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: ippi20.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: ipps-5.1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: ipps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: ipps20.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: ippvm-5.1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: ippvm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: ippvm20.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: ippcc-5.1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: ippcc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: ippcc20.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: mkl_p4.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: mkl_p3.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: mkl_def.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: pla.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: pdh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: tdh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: wevtapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: shdocvw.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\pcaui.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\pcaui.exe	Section loaded: pcaui.dll	Jump to behavior
Source: C:\Windows\System32\pcaui.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Windows\System32\pcaui.exe	Section loaded: wer.dll	Jump to behavior
Source: C:\Windows\System32\pcaui.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: cximagecrt.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: cxcore099.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: cv099.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: highgui099.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: crashrpt.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: opengl32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: glu32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: glu32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: avifil32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: avicap32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippopencv099.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippopencv097.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippcv-5.1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippcv.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippcv20.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippi-5.1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippi20.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ipps-5.1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ipps.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ipps20.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippvm-5.1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippvm.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippvm20.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippcc-5.1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippcc.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippcc20.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: mkl_p4.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: mkl_p3.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: mkl_def.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: pla.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: pdh.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: tdh.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: wevtapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: shdocvw.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\pcaui.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\pcaui.exe	Section loaded: pcaui.dll	Jump to behavior
Source: C:\Windows\System32\pcaui.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Windows\System32\pcaui.exe	Section loaded: wer.dll	Jump to behavior
Source: C:\Windows\System32\pcaui.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: winbrand.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bitsproxy.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: cximagecrt.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: cxcore099.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: cv099.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: highgui099.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: crashrpt.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: opengl32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: glu32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: glu32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: avifil32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: avicap32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippopencv099.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippopencv097.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippcv-5.1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippcv.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippcv20.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippi-5.1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippi20.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ipps-5.1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ipps.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ipps20.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippvm-5.1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippvm.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippvm20.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippcc-5.1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippcc.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: ippcc20.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: mkl_p4.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: mkl_p3.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: mkl_def.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: pla.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: pdh.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: tdh.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: wevtapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: shdocvw.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\pcaui.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\pcaui.exe	Section loaded: pcaui.dll	Jump to behavior
Source: C:\Windows\System32\pcaui.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Windows\System32\pcaui.exe	Section loaded: wer.dll	Jump to behavior
Source: C:\Windows\System32\pcaui.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: winbrand.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: uxtheme.dll	Jump to behavior

Source: exuquepx.7.dr

LNK file: ..\..\Roaming\demoArchivebcz\ManyCam.exe

Source: iieCxV2b1n.msi

Static file information: File size 2990080 > 1048576

Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Jump to behavior

Source:	Binary string: d:\branch_2.5\bin\cximagecrt.pdb0 source: ManyCam.exe, 00000003.00000002.2166338310.0000000010062000.00000002.00000001.01000000.00000004.sdmp, ManyCam.exe, 00000005.00000002.2219366899.0000000010062000.00000002.00000001.01000000.0000000C.sdmp, ManyCam.exe, 0000000C.00000002.2466630485.0000000010062000.00000002.00000001.01000000.0000000C.sdmp, cximagecrt.dll.2.dr, cximagecrt.dll.3.dr
Source:	Binary string: d:\branch_2.5\bin\cximagecrt.pdb source: ManyCam.exe, 00000003.00000002.2166338310.0000000010062000.00000002.00000001.01000000.00000004.sdmp, ManyCam.exe, 00000005.00000002.2219366899.0000000010062000.00000002.00000001.01000000.0000000C.sdmp, ManyCam.exe, 0000000C.00000002.2466630485.0000000010062000.00000002.00000001.01000000.0000000C.sdmp, cximagecrt.dll.2.dr, cximagecrt.dll.3.dr
Source:	Binary string: c:\Program Files\OpenCV\bin\highgui099.pdb8` source: ManyCam.exe, 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmp, ManyCam.exe, 00000005.00000002.2217621375.000000000188D000.00000002.00000001.01000000.00000011.sdmp, ManyCam.exe, 0000000C.00000002.2464370715.0000000000BDD000.00000002.00000001.01000000.00000011.sdmp, highgui099.dll.2.dr, highgui099.dll.3.dr
Source:	Binary string: c:\Program Files\OpenCV\bin\cxcore099.pdb source: ManyCam.exe, 00000003.00000002.2162452316.0000000000CE1000.00000002.00000001.01000000.00000007.sdmp, ManyCam.exe, 00000005.00000002.2217079654.0000000000C11000.00000002.00000001.01000000.0000000D.sdmp, ManyCam.exe, 0000000C.00000002.2464752763.00000000012D1000.00000002.00000001.01000000.0000000D.sdmp, cxcore099.dll.2.dr
Source:	Binary string: diaLocatePDB-> Looking for %s... %s%s.pdbFPOPDATAXDATAOMAPFROMOMAPTO$$$IP not set! source: dbghelp.dll.2.dr
Source:	Binary string: wntdll.pdbUGP source: ManyCam.exe, 00000003.00000002.2165395088.00000000043F2000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000003.00000002.2165697387.0000000004750000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218603345.0000000003F27000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218926566.0000000004633000.00000004.00000001.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218747581.0000000004280000.00000004.00000800.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446861312.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446634321.00000000048B7000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465924719.000000000461D000.00000004.00000001.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465716029.0000000004260000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465598920.0000000003F0F000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704424826.0000000004CE2000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704694294.00000000051D0000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: ManyCam.exe, 00000003.00000002.2165395088.00000000043F2000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000003.00000002.2165697387.0000000004750000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218603345.0000000003F27000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218926566.0000000004633000.00000004.00000001.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218747581.0000000004280000.00000004.00000800.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446861312.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446634321.00000000048B7000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465924719.000000000461D000.00000004.00000001.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465716029.0000000004260000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465598920.0000000003F0F000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704424826.0000000004CE2000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704694294.00000000051D0000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: c:\Program Files\OpenCV\bin\highgui099.pdb source: ManyCam.exe, 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmp, ManyCam.exe, 00000005.00000002.2217621375.000000000188D000.00000002.00000001.01000000.00000011.sdmp, ManyCam.exe, 0000000C.00000002.2464370715.0000000000BDD000.00000002.00000001.01000000.00000011.sdmp, highgui099.dll.2.dr, highgui099.dll.3.dr
Source:	Binary string: c:\Program Files\OpenCV\bin\cv099.pdb source: ManyCam.exe, 00000003.00000003.2158670135.0000000000E96000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000003.00000002.2162785863.0000000000DAF000.00000002.00000001.01000000.00000008.sdmp, ManyCam.exe, 00000005.00000002.2217487218.000000000181F000.00000002.00000001.01000000.0000000E.sdmp, ManyCam.exe, 0000000C.00000002.2464881665.000000000139F000.00000002.00000001.01000000.0000000E.sdmp
Source:	Binary string: c:\Program Files\OpenCV\bin\cxcore099.pdbu source: ManyCam.exe, 00000003.00000002.2162452316.0000000000CE1000.00000002.00000001.01000000.00000007.sdmp, ManyCam.exe, 00000005.00000002.2217079654.0000000000C11000.00000002.00000001.01000000.0000000D.sdmp, ManyCam.exe, 0000000C.00000002.2464752763.00000000012D1000.00000002.00000001.01000000.0000000D.sdmp, cxcore099.dll.2.dr
Source:	Binary string: d:\branch_2.5\bin\ManyCam.pdb source: ManyCam.exe, 00000003.00000000.2152038111.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr
Source:	Binary string: d:\branch_2.5\Bin\CrashRpt.pdb source: ManyCam.exe, 00000003.00000002.2163554374.0000000002012000.00000002.00000001.01000000.00000005.sdmp, ManyCam.exe, 00000005.00000002.2217973739.0000000002012000.00000002.00000001.01000000.0000000F.sdmp, ManyCam.exe, 0000000C.00000002.2465124087.0000000002012000.00000002.00000001.01000000.0000000F.sdmp
Source:	Binary string: dbghelp.pdb source: ManyCam.exe, 00000003.00000002.2166506067.000000006D511000.00000020.00000001.01000000.00000006.sdmp, ManyCam.exe, 00000005.00000002.2219442160.000000006D511000.00000020.00000001.01000000.00000010.sdmp, ManyCam.exe, 0000000C.00000002.2466696009.000000006D511000.00000020.00000001.01000000.00000010.sdmp, dbghelp.dll.2.dr

Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe

Code function: 3_2_0052309D IsProcessorFeaturePresent,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcessHeap,GetProcessHeap,HeapAlloc,InterlockedCompareExchange,GetProcessHeap,HeapFree,

3_2_0052309D

Source: dbghelp.dll.3.dr	Static PE information: real checksum: 0x8050c should be: 0x7c27e
Source: dbghelp.dll.2.dr	Static PE information: real checksum: 0x8050c should be: 0x7c27e
Source: ndae.7.dr	Static PE information: real checksum: 0x0 should be: 0xc864a
Source: svubpwldttjkvt.14.dr	Static PE information: real checksum: 0x0 should be: 0xc864a

Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_005242D1 push ecx; ret	3_2_005242E4
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BEC355 push ecx; ret	3_2_00BEC368
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_005242D1 push ecx; ret	5_2_005242E4
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00C10361 push ecx; ret	5_2_00C10374

Source: ndae.7.dr	Static PE information: section name: .text entropy: 6.816445298936949
Source: svubpwldttjkvt.14.dr	Static PE information: section name: .text entropy: 6.816445298936949

Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	File created: C:\Users\user\AppData\Roaming\demoArchivebcz\cximagecrt.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Ormolu\cximagecrt.dll	Jump to dropped file
Source: C:\Windows\SysWOW64\cmd.exe	File created: C:\Users\user\AppData\Local\Temp\svubpwldttjkvt	Jump to dropped file
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	File created: C:\Users\user\AppData\Roaming\demoArchivebcz\cv099.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Ormolu\dbghelp.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	File created: C:\Users\user\AppData\Roaming\demoArchivebcz\dbghelp.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Ormolu\cxcore099.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	File created: C:\Users\user\AppData\Roaming\demoArchivebcz\cxcore099.dll	Jump to dropped file
Source: C:\Windows\SysWOW64\cmd.exe	File created: C:\Users\user\AppData\Local\Temp\ndae	Jump to dropped file
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	File created: C:\Users\user\AppData\Roaming\demoArchivebcz\highgui099.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Ormolu\highgui099.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	File created: C:\Users\user\AppData\Roaming\demoArchivebcz\CrashRpt.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	File created: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Ormolu\cv099.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Ormolu\CrashRpt.dll	Jump to dropped file

Source: C:\Windows\SysWOW64\cmd.exe	File created: C:\Users\user\AppData\Local\Temp\ndae			Jump to dropped file
Source: C:\Windows\SysWOW64\cmd.exe	File created: C:\Users\user\AppData\Local\Temp\svubpwldttjkvt			Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Found hidden mapped module (file has been removed from disk)

Source: C:\Windows\SysWOW64\cmd.exe	Module Loaded: C:\USERS\user\APPDATA\LOCAL\TEMP\NDAE
Source: C:\Windows\SysWOW64\cmd.exe	Module Loaded: C:\USERS\user\APPDATA\LOCAL\TEMP\SVUBPWLDTTJKVT

Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Switches to a custom stack to bypass stack traces

Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	API/Special instruction interceptor: Address: 6D0B7C44
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	API/Special instruction interceptor: Address: 6D0B7C44
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	API/Special instruction interceptor: Address: 6D0B7945
Source: C:\Windows\SysWOW64\cmd.exe	API/Special instruction interceptor: Address: 6D0B3B54

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 2970000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 2BA0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 29B0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 1280000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 2EC0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 2E10000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477			Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Window / User API: threadDelayed 7859			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Window / User API: threadDelayed 1927			Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\svubpwldttjkvt			Jump to dropped file
Source: C:\Windows\SysWOW64\cmd.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\ndae			Jump to dropped file

Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe

API coverage: 0.2 %

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep count: 34 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -31359464925306218s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -59875s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 6220	Thread sleep count: 7859 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 6220	Thread sleep count: 1927 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -45131s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -59765s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -30813s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -59656s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -45600s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -59547s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -53417s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -59437s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -59328s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -59218s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -46962s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -59109s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -38586s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -59000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -58890s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -58781s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -32442s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -58672s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -40961s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -58562s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -58453s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -58805s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -58344s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -47931s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -58234s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -44954s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -58124s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -58015s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -52446s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -57876s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -57754s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -30007s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -57617s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -57515s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -38452s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -57406s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -46862s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -39373s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -57296s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -57187s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -31194s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -57078s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -42652s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -56968s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -58977s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -56859s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -56750s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -48539s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -56640s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -56531s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -45019s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -57848s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -56422s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -56312s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -56203s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -56093s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -54280s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -55984s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -55874s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -55560s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -55765s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -55656s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -36611s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -55546s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -55437s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -51119s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -55328s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -38217s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -55218s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -30921s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -55109s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -55000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -39707s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -32320s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -54890s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -54781s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -52051s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -54672s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -37406s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -54562s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 368	Thread sleep time: -57971s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1584	Thread sleep time: -54453s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5588	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior

Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_004164A0 lstrlenW,FindFirstFileW,GetFullPathNameW,SetLastError,		3_2_004164A0
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_004164A0 lstrlenW,FindFirstFileW,GetFullPathNameW,SetLastError,		5_2_004164A0

Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe

Code function: 5_2_00C0D5E0 GetSystemInfo,RegOpenKeyExA,RegQueryValueExA,RegCloseKey,QueryPerformanceFrequency,

5_2_00C0D5E0

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 60000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 59875	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 45131	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 59765	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 30813	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 59656	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 45600	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 59547	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 53417	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 59437	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 59328	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 59218	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 46962	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 59109	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 38586	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 59000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 58890	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 58781	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 32442	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 58672	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 40961	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 58562	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 58453	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 58805	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 58344	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 47931	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 58234	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 44954	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 58124	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 58015	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 52446	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 57876	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 57754	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 30007	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 57617	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 57515	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 38452	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 57406	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 46862	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 39373	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 57296	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 57187	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 31194	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 57078	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 42652	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 56968	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 58977	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 56859	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 56750	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 48539	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 56640	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 56531	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 45019	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 57848	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 56422	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 56312	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 56203	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 56093	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 54280	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 55984	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 55874	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 55560	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 55765	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 55656	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 36611	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 55546	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 55437	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 51119	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 55328	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 38217	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 55218	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 30921	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 55109	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 55000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 39707	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 32320	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 54890	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 54781	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 52051	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 54672	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 37406	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 54562	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 57971	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 54453	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Roaming\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\	Jump to behavior

Source: cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: noreply@vmware.com0
Source: cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: http://www.vmware.com/0
Source: cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware, Inc.1!0
Source: cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: http://www.vmware.com/0/
Source: cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware, Inc.1
Source: cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware, Inc.0
Source: MSBuild.exe, 0000000B.00000002.4602256407.0000000000C0D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\System32\msiexec.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe

Code function: 3_2_00523722 IsDebuggerPresent,_crt_debugger_hook,SetUnhandledExceptionFilter,UnhandledExceptionFilter,_crt_debugger_hook,GetCurrentProcess,TerminateProcess,

3_2_00523722

Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe

3_2_0052309D

Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe

Code function: 3_2_00523077 GetProcessHeap,HeapFree,

3_2_00523077

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Windows\System32\msiexec.exe

Process created: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe "C:\Users\user\AppData\Local\Ormolu\ManyCam.exe"

Jump to behavior

Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00523722 IsDebuggerPresent,_crt_debugger_hook,SetUnhandledExceptionFilter,UnhandledExceptionFilter,_crt_debugger_hook,GetCurrentProcess,TerminateProcess,	3_2_00523722
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Code function: 3_2_00BEBBB6 IsDebuggerPresent,_crt_debugger_hook,SetUnhandledExceptionFilter,UnhandledExceptionFilter,_crt_debugger_hook,GetCurrentProcess,TerminateProcess,	3_2_00BEBBB6
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Code function: 5_2_00523722 IsDebuggerPresent,_crt_debugger_hook,SetUnhandledExceptionFilter,UnhandledExceptionFilter,_crt_debugger_hook,GetCurrentProcess,TerminateProcess,	5_2_00523722

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Found direct / indirect Syscall (likely to bypass EDR)

Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	NtQuerySystemInformation: Direct from: 0x6D513079	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	NtProtectVirtualMemory: Direct from: 0x6D042DF7	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	NtSetInformationThread: Direct from: 0x6D51245D	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	NtProtectVirtualMemory: Direct from: 0x6C91E5B8	Jump to behavior
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	NtProtectVirtualMemory: Direct from: 0x77377B2E	Jump to behavior

Maps a DLL or memory area into another process

Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: NULL target: C:\Windows\SysWOW64\cmd.exe protection: read write	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: NULL target: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe protection: read write	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Section loaded: NULL target: C:\Windows\SysWOW64\cmd.exe protection: read write	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: NULL target: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe protection: read write	Jump to behavior

Writes to foreign memory regions

Source: C:\Windows\SysWOW64\cmd.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 6B6B1000	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 8AD008	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 6B6B1000	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: DA6008	Jump to behavior

Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior

Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Process created: C:\Windows\System32\pcaui.exe "c:\windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {bce4b583-343f-44b8-8f95-9f76104077b9} -a "manycam" -v "manycam llc" -s "to work properly, this app must be reinstalled after you upgrade windows." -n 4 -f 0 -k 0 -e "c:\users\user\appdata\local\ormolu\manycam.exe"
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Process created: C:\Windows\System32\pcaui.exe "c:\windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {bce4b583-343f-44b8-8f95-9f76104077b9} -a "manycam" -v "manycam llc" -s "to work properly, this app must be reinstalled after you upgrade windows." -n 4 -f 0 -k 0 -e "c:\users\user\appdata\roaming\demoarchivebcz\manycam.exe"
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Process created: C:\Windows\System32\pcaui.exe "c:\windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {bce4b583-343f-44b8-8f95-9f76104077b9} -a "manycam" -v "manycam llc" -s "to work properly, this app must be reinstalled after you upgrade windows." -n 4 -f 0 -k 0 -e "c:\users\user\appdata\roaming\demoarchivebcz\manycam.exe"
Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	Process created: C:\Windows\System32\pcaui.exe "c:\windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {bce4b583-343f-44b8-8f95-9f76104077b9} -a "manycam" -v "manycam llc" -s "to work properly, this app must be reinstalled after you upgrade windows." -n 4 -f 0 -k 0 -e "c:\users\user\appdata\local\ormolu\manycam.exe"	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Process created: C:\Windows\System32\pcaui.exe "c:\windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {bce4b583-343f-44b8-8f95-9f76104077b9} -a "manycam" -v "manycam llc" -s "to work properly, this app must be reinstalled after you upgrade windows." -n 4 -f 0 -k 0 -e "c:\users\user\appdata\roaming\demoarchivebcz\manycam.exe"	Jump to behavior
Source: C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	Process created: C:\Windows\System32\pcaui.exe "c:\windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {bce4b583-343f-44b8-8f95-9f76104077b9} -a "manycam" -v "manycam llc" -s "to work properly, this app must be reinstalled after you upgrade windows." -n 4 -f 0 -k 0 -e "c:\users\user\appdata\roaming\demoarchivebcz\manycam.exe"	Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Compression.FileSystem\v4.0_4.0.0.0__b77a5c561934e089\System.IO.Compression.FileSystem.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior

Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe

Code function: 3_2_00524748 GetSystemTimeAsFileTime,GetCurrentProcessId,GetCurrentThreadId,GetTickCount,QueryPerformanceCounter,

3_2_00524748

Source: C:\Users\user\AppData\Local\Ormolu\ManyCam.exe

Code function: 3_2_004170D0 memset,GetVersionExW,

3_2_004170D0

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected RedLine Stealer

Source: Yara match	File source: 7.2.cmd.exe.56800c8.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.cmd.exe.56b00c8.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.cmd.exe.56800c8.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.MSBuild.exe.e20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.cmd.exe.56b00c8.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000E.00000002.2704945415.00000000056B0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.2705147083.0000000000E22000.00000002.00000001.01000000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2447289622.0000000005680000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: cmd.exe PID: 2672, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: cmd.exe PID: 2848, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: MSBuild.exe PID: 7156, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\ndae, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\svubpwldttjkvt, type: DROPPED

Source: Yara match	File source: 7.2.cmd.exe.56800c8.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.cmd.exe.56b00c8.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.cmd.exe.56800c8.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.MSBuild.exe.e20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.cmd.exe.56b00c8.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000E.00000002.2704945415.00000000056B0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.2705147083.0000000000E22000.00000002.00000001.01000000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2447289622.0000000005680000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: cmd.exe PID: 2672, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: cmd.exe PID: 2848, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: MSBuild.exe PID: 7156, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\ndae, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\svubpwldttjkvt, type: DROPPED

Remote Access Functionality

Yara detected RedLine Stealer

Source: Yara match	File source: 7.2.cmd.exe.56800c8.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.cmd.exe.56b00c8.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.cmd.exe.56800c8.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.MSBuild.exe.e20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.cmd.exe.56b00c8.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000E.00000002.2704945415.00000000056B0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.2705147083.0000000000E22000.00000002.00000001.01000000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2447289622.0000000005680000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: cmd.exe PID: 2672, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: cmd.exe PID: 2848, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: MSBuild.exe PID: 7156, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\ndae, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\svubpwldttjkvt, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Replication Through Removable Media	1 Command and Scripting Interpreter	11 DLL Side-Loading	211 Process Injection	21 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	11 Archive Collected Data	12 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	Boot or Logon Initialization Scripts	1 Abuse Elevation Control Mechanism	11 Disable or Modify Tools	LSASS Memory	221 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	11 DLL Side-Loading	31 Virtualization/Sandbox Evasion	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	211 Process Injection	NTDS	31 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Deobfuscate/Decode Files or Information	LSA Secrets	1 Application Window Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Abuse Elevation Control Mechanism	Cached Domain Credentials	11 Peripheral Device Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	3 Obfuscated Files or Information	DCSync	3 File and Directory Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Software Packing	Proc Filesystem	116 System Information Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	11 DLL Side-Loading	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	1 File Deletion	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
iieCxV2b1n.msi	29%	ReversingLabs

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\svubpwldttjkvt	100%	Avira	TR/Agent.skcyd
C:\Users\user\AppData\Local\Temp\ndae	100%	Avira	TR/Agent.skcyd
C:\Users\user\AppData\Local\Temp\svubpwldttjkvt	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\ndae	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Ormolu\CrashRpt.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	0%	ReversingLabs
C:\Users\user\AppData\Local\Ormolu\cv099.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Ormolu\cxcore099.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Ormolu\cximagecrt.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Ormolu\dbghelp.dll	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Ormolu\highgui099.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\ndae	83%	ReversingLabs	ByteCode-MSIL.Trojan.Jalapeno
C:\Users\user\AppData\Local\Temp\svubpwldttjkvt	83%	ReversingLabs	ByteCode-MSIL.Trojan.Jalapeno
C:\Users\user\AppData\Roaming\demoArchivebcz\CrashRpt.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe	0%	ReversingLabs
C:\Users\user\AppData\Roaming\demoArchivebcz\cv099.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\demoArchivebcz\cxcore099.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\demoArchivebcz\cximagecrt.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\demoArchivebcz\dbghelp.dll	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Roaming\demoArchivebcz\highgui099.dll	0%	ReversingLabs

Source	Detection	Scanner	Label	Link
http://www.symauth.com/rpa00	0%	URL Reputation	safe
http://www.symauth.com/cps0(	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false		unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.manycam.com/codec	ManyCam.exe, ManyCam.exe, 00000005.00000000.2161245446.00000000005A4000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409060950.00000000005A4000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	false		unknown
http://www.manycam.com/codecVerdanaTo	ManyCam.exe, 00000003.00000000.2152038111.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	false		unknown
http://www.vmware.com/0	ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://www.manycam.com/help/effects/snapshot/these	ManyCam.exe, 00000003.00000000.2152038111.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	false		unknown
http://www.manycam.com/codecVerdanaThis	ManyCam.exe, 00000003.00000000.2152038111.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	false		unknown
https://pastebin.com/raw/TeiUkREy	MSBuild.exe, 00000011.00000002.2705928640.0000000002EC1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://www.symauth.com/rpa00	ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://manycam.com/help/effects	ManyCam.exe, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	false		unknown
http://manycam.com/upload_effect?filepath=ManyCam	ManyCam.exe, 00000003.00000000.2152038111.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	false		unknown
https://pastebin.com/raw/TeiUkREyPO	MSBuild.exe, 00000011.00000002.2705928640.0000000002EC1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://www.manycam.com0	cximagecrt.dll.2.dr, cximagecrt.dll.3.dr, ManyCam.exe.2.dr, ManyCam.exe.3.dr	false		unknown
http://download.manycam.comVerdanaThis	ManyCam.exe, 00000003.00000000.2152038111.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	false		unknown
http://www.info-zip.org/	ManyCam.exe, 00000003.00000002.2164898141.0000000004268000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003D8F000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C10000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003D70000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.000000000504F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://download.manycam.com	ManyCam.exe, 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000000.2161245446.00000000005A4000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409060950.00000000005A4000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	false		unknown
http://www.manycam.comhttp://manycam.com/feedback/?version=%sAnchor	ManyCam.exe, 00000003.00000000.2152038111.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	false		unknown
http://www.vmware.com/0/	ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://download.manycam.com/effects/%s/%s?v=%sBackgroundsDynamicDynamic	ManyCam.exe, 00000003.00000000.2152038111.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	false		unknown
http://download.manycam.com/effects/%s/%s?v=%sManyCam	ManyCam.exe, 00000003.00000000.2152038111.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	false		unknown
http://download.manycam.comNew	ManyCam.exe, 00000003.00000000.2152038111.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmp, ManyCam.exe, 00000005.00000002.2216719272.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 00000005.00000000.2161179940.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000002.2464174605.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409004618.000000000053B000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	false		unknown
http://www.symauth.com/cps0(	ManyCam.exe, 00000003.00000002.2164898141.00000000042BE000.00000004.00000020.00020000.00000000.sdmp, ManyCam.exe, 00000005.00000002.2218473328.0000000003DE5000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 00000007.00000002.2446759799.0000000004C58000.00000004.00000800.00020000.00000000.sdmp, ManyCam.exe, 0000000C.00000002.2465472629.0000000003DC6000.00000004.00000020.00020000.00000000.sdmp, cmd.exe, 0000000E.00000002.2704587675.0000000005097000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.manycam.com	ManyCam.exe, ManyCam.exe, 00000005.00000000.2161245446.00000000005A4000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe, 0000000C.00000000.2409060950.00000000005A4000.00000002.00000001.01000000.0000000B.sdmp, ManyCam.exe.2.dr, ManyCam.exe.3.dr	false		unknown
http://manycam.com/feedback/?version=%s	ManyCam.exe	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
91.240.118.154	unknown	unknown		49453	GLOBALLAYERNL	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1536943
Start date and time:	2024-10-18 12:08:16 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 12m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	iieCxV2b1n.msi renamed because original name is a hash value
Original Sample Name:	afbdaa974cdc9624fe94b5c0ca6ce01695570790a68cc9c86ea0619973f13d07.msi
Detection:	MAL
Classification:	mal100.troj.evad.winMSI@23/43@0/1
EGA Information:	Successful, ratio: 50%
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 295
Cookbook Comments:	Found application associated with file extension: .msi Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 40.115.3.253, 172.202.163.200, 192.229.221.95, 20.3.187.198, 2.16.100.168, 88.221.110.91, 40.69.42.241
Excluded domains from analysis (whitelisted): client.wns.windows.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.afd.azureedge.net, ctldl.windowsupdate.com, a767.dspw65.akamai.net, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, wns.notify.trafficmanager.net, fe3.delivery.mp.microsoft.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, azureedge-t-prod.trafficmanager.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Execution Graph export aborted for target ManyCam.exe, PID 5928 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Reached maximum number of 1000 Suricata alerts, please consult the 'Suricata Logs'
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtDeviceIoControlFile calls found.
VT rate limit hit for: iieCxV2b1n.msi

Simulations

Behavior and APIs

Time	Type	Description
06:09:38	API Interceptor	1670679x Sleep call for process: MSBuild.exe modified
06:09:38	API Interceptor	1x Sleep call for process: cmd.exe modified
12:09:26	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NotepadTool_yoj_v2.lnk

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0032.t-0009.t-msedge.net	285131511133.dll.dll	Get hash	malicious	Unknown	Browse	13.107.246.60
	https://bino8-7920.twil.io/index4.html	Get hash	malicious	Unknown	Browse	13.107.246.60
	XYrLOQoLE4.exe	Get hash	malicious	Unknown	Browse	13.107.246.60
	RFQ - BELMAN.exe	Get hash	malicious	AgentTesla	Browse	13.107.246.60
	https://flipboard.com/redirect?url=https%3A%2F%2Finsidernewz.com%2Flocate-the-ultimate-gourmet-gift-for-halloween-food-enthusiast%2F%3Futm_source%3Dflipboard%26utm_content%3Dmanofmanytastes%252Fmagazine%252FFlipboard%2BMagazine&v=J84-JSir7a1wsGKxFv--frKQTAR4j1FyPVnSw8xfM1sAAAGSmcHjcQ	Get hash	malicious	Unknown	Browse	13.107.246.60
	http://www.iankitching.me.uk/	Get hash	malicious	Unknown	Browse	13.107.246.60
	http://169.1.16.29/LOUD_EYE	Get hash	malicious	Unknown	Browse	13.107.246.60
	https://www.cadex.com/shop/products/batteryshop-32	Get hash	malicious	HTMLPhisher	Browse	13.107.246.60
	https://www.cyfirma.com/research/exploiting-document-templates-stego-campaign-deploying-remcos-rat-and-agent-tesla/	Get hash	malicious	Unknown	Browse	13.107.246.60
	http://169.1.16.29/Swift-Stage1-Obfuscated.exe	Get hash	malicious	Unknown	Browse	13.107.246.60
fp2e7a.wpc.phicdn.net	https://bino8-7920.twil.io/index4.html	Get hash	malicious	Unknown	Browse	192.229.221.95
	https://u47461937.ct.sendgrid.net/ls/click?upn=u001.90WJ2x5yie-2F4sdO-2BZ5bb0nufavWldnzsl0KnsmK3hMo-2BHMnWSF3DsxzbvDCWDsdFnegn-2BfWobRZ1kbLGMXgyXcGtyLzQM-2FGP3QHbHRPWVr6D0fLK-2BSNRq-2FVCZMabreIai9D-2BxA6whvHN5s1OqTfwm-2FgZQjeYErjyMYjob5nOcXGpRAG25SYwaNre11j-2BHVoXasoyLNyJtD1tPPwnUAPCOFLp9PDvSbufCeZgma-2FIK98-3Dcm_y_Ukbh-2F8Y2Z4RsyLMh2XL7Wo3yUsBZ9SeqI2Qmy9Bgt19mw9e4WkHPMitoZcq809ebbnmk8C6IJ5c7t29jrnIindsFxuY2R9d234nclZXStC9HmqBttLLojHUGnXdAWF5QJUx33skMns1apjumw9Pw3UfSTdjnlg5PrNNACcyuKpBoq4ETSyFgl4lbha5Mxiy3uArHLEv6ML9dlCYMz2aiMvH1U2BEaexXFmP3HsruDeCB11cOufMst2ySj2lo1MOLQ6aZD-2BJx5wirMGc5AFzol7YsHD-2BfJQUWDmNRvkyRWdsBEj0IMNeL5wqNyxjJ5hFrqTXQmCwpYMQ2bnKr-2BkBvSNUHzpUEqp-2BnPgQfjdKbtF3Z3im1MIzPwzt8NSpo3Gg6TTmqFNZ2ScP-2B7-2FoMepCdwrUSGGaAVc4bnbc7YhyZk1NsGgzWXhuiw5qQURbTlrLrNfUfcY80DFOe7nGqmxieALgNl9N387kxhKpFX-2Fnaawfjy5aLaOcnI1bIrW45QsQlpLgwiJocPCDckAx-2FSSuaxIwXkaLYj-2FPzrmv96ov5y2izrBMhWyBmDCPvZ5WDVvkaVY5wttF199PKn9A3y6nDVW-2BcDvQHCHFjHnYq34GMvKniNSIx5hiSo-2BnAFE75yLesQfb-2FtMOsyAp0aASAHTKj4fiYZ1gy2gQ6aTtm45axQJBOPfoW1XG1ZFy5zgMRuRNvLru7MEMaKlOzOBvYn-2BIMfSSpi7rtbb5t8KWTZg-2Br-2FY0Ad2S34htMKob86jSLvk5Zj3Hait9j-2B0TErriVJ9hutTBGU0IAH7S4LkHhpEYm9x8mvC3Gf2BwyPLHtkXi3HaVRoBV6YloGkBzCRSLnpyl2LhtBuhCV3pZreRfYAQGhh7nnEOGs0Wuw1wnYjV9yfByZ0NgFI-2Bs3XMcHsUMwml5eg-3D-3D	Get hash	malicious	HTMLPhisher	Browse	192.229.221.95
	http://plankton-app-xfp49.ondigitalocean.app	Get hash	malicious	TechSupportScam	Browse	192.229.221.95
	n5h5BaL8q0.exe	Get hash	malicious	Sality, XWorm	Browse	192.229.221.95
	Y41oVdYohe.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	https://sitecoresolrlb-mig.ashurst.com/384ff7382de624fb94dbaf6da11977bba1ecd427	Get hash	malicious	HTMLPhisher	Browse	192.229.221.95
	RFQ-KTE-07102024.pdf.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	192.229.221.95
	2749924238178398837.js	Get hash	malicious	Strela Downloader	Browse	192.229.221.95
	11823930302965360.js	Get hash	malicious	Strela Downloader	Browse	192.229.221.95
	RFQ - BELMAN.exe	Get hash	malicious	AgentTesla	Browse	192.229.221.95

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GLOBALLAYERNL	2ngxhElaud.exe	Get hash	malicious	Xmrig	Browse	213.152.162.15
	file.exe	Get hash	malicious	Xmrig	Browse	213.152.162.15
	ejdc7iP3A7.vbs	Get hash	malicious	Remcos	Browse	134.19.177.44
	Payment proof.xls	Get hash	malicious	Remcos	Browse	134.19.177.44
	TT12822024.xls	Get hash	malicious	Remcos	Browse	134.19.177.44
	IEry29c3sb.exe	Get hash	malicious	Remcos, DBatLoader	Browse	213.152.162.181
	URL4PrdxFm.exe	Get hash	malicious	Unknown	Browse	213.152.161.85
	36nYB3ZB3Y.exe	Get hash	malicious	Unknown	Browse	213.152.161.85
	mEUynxeOFV.exe	Get hash	malicious	Unknown	Browse	213.152.162.15
	8OgTtHvzHW.exe	Get hash	malicious	Unknown	Browse	213.152.161.85

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://share.nuclino.com/p/Mlanie-BAUDRY-PARTAGER-UN-FICHIER-POUR-RVISION-4ogXl9spWg3RaCX5e3wD3b	Get hash	malicious	Unknown	Browse	13.107.246.60
	https://bino8-7920.twil.io/index4.html	Get hash	malicious	Unknown	Browse	13.107.246.60
	https://u47461937.ct.sendgrid.net/ls/click?upn=u001.90WJ2x5yie-2F4sdO-2BZ5bb0nufavWldnzsl0KnsmK3hMo-2BHMnWSF3DsxzbvDCWDsdFnegn-2BfWobRZ1kbLGMXgyXcGtyLzQM-2FGP3QHbHRPWVr6D0fLK-2BSNRq-2FVCZMabreIai9D-2BxA6whvHN5s1OqTfwm-2FgZQjeYErjyMYjob5nOcXGpRAG25SYwaNre11j-2BHVoXasoyLNyJtD1tPPwnUAPCOFLp9PDvSbufCeZgma-2FIK98-3Dcm_y_Ukbh-2F8Y2Z4RsyLMh2XL7Wo3yUsBZ9SeqI2Qmy9Bgt19mw9e4WkHPMitoZcq809ebbnmk8C6IJ5c7t29jrnIindsFxuY2R9d234nclZXStC9HmqBttLLojHUGnXdAWF5QJUx33skMns1apjumw9Pw3UfSTdjnlg5PrNNACcyuKpBoq4ETSyFgl4lbha5Mxiy3uArHLEv6ML9dlCYMz2aiMvH1U2BEaexXFmP3HsruDeCB11cOufMst2ySj2lo1MOLQ6aZD-2BJx5wirMGc5AFzol7YsHD-2BfJQUWDmNRvkyRWdsBEj0IMNeL5wqNyxjJ5hFrqTXQmCwpYMQ2bnKr-2BkBvSNUHzpUEqp-2BnPgQfjdKbtF3Z3im1MIzPwzt8NSpo3Gg6TTmqFNZ2ScP-2B7-2FoMepCdwrUSGGaAVc4bnbc7YhyZk1NsGgzWXhuiw5qQURbTlrLrNfUfcY80DFOe7nGqmxieALgNl9N387kxhKpFX-2Fnaawfjy5aLaOcnI1bIrW45QsQlpLgwiJocPCDckAx-2FSSuaxIwXkaLYj-2FPzrmv96ov5y2izrBMhWyBmDCPvZ5WDVvkaVY5wttF199PKn9A3y6nDVW-2BcDvQHCHFjHnYq34GMvKniNSIx5hiSo-2BnAFE75yLesQfb-2FtMOsyAp0aASAHTKj4fiYZ1gy2gQ6aTtm45axQJBOPfoW1XG1ZFy5zgMRuRNvLru7MEMaKlOzOBvYn-2BIMfSSpi7rtbb5t8KWTZg-2Br-2FY0Ad2S34htMKob86jSLvk5Zj3Hait9j-2B0TErriVJ9hutTBGU0IAH7S4LkHhpEYm9x8mvC3Gf2BwyPLHtkXi3HaVRoBV6YloGkBzCRSLnpyl2LhtBuhCV3pZreRfYAQGhh7nnEOGs0Wuw1wnYjV9yfByZ0NgFI-2Bs3XMcHsUMwml5eg-3D-3D	Get hash	malicious	HTMLPhisher	Browse	13.107.246.60
	http://plankton-app-xfp49.ondigitalocean.app	Get hash	malicious	TechSupportScam	Browse	13.107.246.60
	https://sites.google.com/view/hffgshfgsqfgsqf/home	Get hash	malicious	Unknown	Browse	13.107.246.60
	XYrLOQoLE4.exe	Get hash	malicious	Unknown	Browse	13.107.246.60
	https://sitecoresolrlb-mig.ashurst.com/384ff7382de624fb94dbaf6da11977bba1ecd427	Get hash	malicious	HTMLPhisher	Browse	13.107.246.60
	ELECTRONIC RECEIPT_Probtp.html	Get hash	malicious	Unknown	Browse	13.107.246.60
	RFQ-KTE-07102024.pdf.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	13.107.246.60
	RFQ - BELMAN.exe	Get hash	malicious	AgentTesla	Browse	13.107.246.60

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Ormolu\ManyCam.exe	kvW4hZu9JA.msi	Get hash	malicious	Unknown	Browse
	PauizRq7By.msi	Get hash	malicious	RHADAMANTHYS	Browse
	XtDhwVrVKn.exe	Get hash	malicious	Unknown	Browse
	VqBVE8dJEA.exe	Get hash	malicious	Remcos	Browse
C:\Users\user\AppData\Local\Ormolu\CrashRpt.dll	kvW4hZu9JA.msi	Get hash	malicious	Unknown	Browse
	PauizRq7By.msi	Get hash	malicious	RHADAMANTHYS	Browse
	XtDhwVrVKn.exe	Get hash	malicious	Unknown	Browse
	VqBVE8dJEA.exe	Get hash	malicious	Remcos	Browse

Created / dropped Files

C:\Config.Msi\6c18ea.rbs

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	modified
Size (bytes):	9596
Entropy (8bit):	5.658853858148802
Encrypted:	false
SSDEEP:	96:KGF/UhllpLYevd9ssGeC/9kUp2CsThq3Up2C6jQuY8Thq9HDjg1zwMdUcpmCupgJ:KGxIlpzjssGeyDplIbplCT/up4
MD5:	356DDEAE350474C245DE4F3B2EBF33C8
SHA1:	DD8F8BA9806BC3D98BEE86735A6BF800F72CAF16
SHA-256:	BD726D6F935F2E67A786997A6E0AC35CFB68EEE4EEF68E4C94100AEEA469823B
SHA-512:	BC9D7897764550D976B97D320A219952B38D785755DE312E804AD1FD920FC4B4471702621739072102DD171068E866A5AD738A01E1009D555F2EE2358AEDBB75
Malicious:	false
Preview:	...@IXOS.@.....@%1RY.@.....@.....@.....@.....@.....@......&.{39F520E4-6237-4FBB-8F2E-71C60962EC87}..Semolina..iieCxV2b1n.msi.@.....@.....@.....@........&.{E399BBE4-4063-457E-BB84-F6CBF9E31491}.....@.....@.....@.....@.......@.....@.....@.......@......Semolina......Rollback..Rolling back action:..[1]..RollbackCleanup..Removing backup files..File: [1]....ProcessComponents..Updating component registration..&.{B37DA261-36A5-597F-B90E-14643815DD3F}&.{39F520E4-6237-4FBB-8F2E-71C60962EC87}.@......&.{01777F62-C15D-537F-B867-A105757598CC}&.{39F520E4-6237-4FBB-8F2E-71C60962EC87}.@......&.{F5856D97-A8B7-56FE-BA74-BB930645DCB5}&.{39F520E4-6237-4FBB-8F2E-71C60962EC87}.@......&.{DB4A112C-2E3F-55B3-8357-06E2A31DB6D5}&.{39F520E4-6237-4FBB-8F2E-71C60962EC87}.@......&.{6516AD08-BA4C-540A-B36A-22BF69D89E2F}&.{39F520E4-6237-4FBB-8F2E-71C60962EC87}.@......&.{DDF08268-AB23-5C8E-9035-9348AC72AB4E}&.{39F520E4-6237-4FBB-8F2E-71C60962EC87}.@......&.{298BA89F-4B47-5136-9E57-0953E77E9354}&.{39F520E4-6237-4FBB-8F2E

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\MSBuild.exe.log

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	410
Entropy (8bit):	5.361827289088002
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPTAq1KDLI4M0kvoDLI4MWuCv:ML9E4KH1qE4jE4Ks
MD5:	812F0A8C671812AA613FC139B69E8614
SHA1:	B4177437C50B25B06FB885362DA36FD171A1C5A9
SHA-256:	6D3DF2C3EA20D3A411078200AFA62DAC6AABA4210C83A2186E80195977BF0F89
SHA-512:	6A82C1F195C66FCC0533B20B8AE9B4F9CEBED6C8D7B450C574E864A60D627F3ABE32081BF65822157716F4672180E19C0DFA91D88663F7FC3CBE7FD0EB36B2EA
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..2,"System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..

C:\Users\user\AppData\Local\Ormolu\CrashRpt.dll

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	123976
Entropy (8bit):	6.382577198291231
Encrypted:	false
SSDEEP:	3072:fzjKVg7GOfS5SqPcCXA4SQlah+8Z4OAAHWTtopW+Z:fzjKVg7GOESqPcCXxT8hhZ4OAAHW2Wa
MD5:	B2D1F5E4A1F0E8D85F0A8AEB7B8148C7
SHA1:	871078213FCC0CE143F518BD69CAA3156B385415
SHA-256:	C28E0AEC124902E948C554436C0EBBEBBA9FC91C906CE2CD887FADA0C64E3386
SHA-512:	1F6D97E02CD684CF4F4554B0E819196BD2811E19B964A680332268BCBB6DEE0E17B2B35B6E66F0FE5622DFFB0A734F39F8E49637A38E4FE7F10D3B5182B30260
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: kvW4hZu9JA.msi, Detection: malicious, Browse Filename: PauizRq7By.msi, Detection: malicious, Browse Filename: XtDhwVrVKn.exe, Detection: malicious, Browse Filename: VqBVE8dJEA.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......................W.....U.....U.............U.......U.......U.....U.....U....Rich....................PE..L.....M...........!................'........ ......................................Gb..............................P........t..........d%..............H...........`$..............................0W..@............ ...............................text...8........................... ..`.rdata../l... ...n..................@..@.data...t...........................@....rsrc...d%.......&..................@..@.reloc..............................@..B........................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Ormolu\ManyCam.exe

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1756232
Entropy (8bit):	6.047140524753333
Encrypted:	false
SSDEEP:	49152:wlkcF8MnJ6tdGeHzpNTxlSvQynZAWBM2FU+SrzcBsWLZF5:wlf8MnJ6tdGeHzpNTxlSvfnOWC6U5Ed5
MD5:	BA699791249C311883BAA8CE3432703B
SHA1:	F8734601F9397CB5EBB8872AF03F5B0639C2EAC6
SHA-256:	7C4EB51A737A81C163F95B50EC54518B82FCF91389D0560E855F3E26CEC07282
SHA-512:	6A0386424C61FBF525625EBE53BB2193ACCD51C2BE9A2527FD567D0A6E112B0D1A047D8F7266D706B726E9C41EA77496E1EDE186A5E59F5311EEEA829A302325
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: kvW4hZu9JA.msi, Detection: malicious, Browse Filename: PauizRq7By.msi, Detection: malicious, Browse Filename: XtDhwVrVKn.exe, Detection: malicious, Browse Filename: VqBVE8dJEA.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........3...R..R..R..f]..R..2...R....R....R....R....R..R..Q.....R....R....R..Rich.R..........................PE..L...e..M............................\|B............@.................................f.........P......................................@..................H............................................d..@............................................text...b........................... ..`.rdata..B...........................@..@.data........P.......P..............@....rsrc........@......................@..@................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Ormolu\cv099.dll

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	679936
Entropy (8bit):	6.674616014554414
Encrypted:	false
SSDEEP:	12288:dHxL34kbwAQR5+ERTJGZfnpyvhZFjtJbPbwQjtX5ooVyPMDFdqvGHjucsEUNwm/7:dzbwAQR57RJGoxjP7/2+HINwwb
MD5:	2A8B33FEE2F84490D52A3A7C75254971
SHA1:	16CE2B1632A17949B92CE32A6211296FEE431DCA
SHA-256:	FAFF6A0745E1720413A028F77583FFF013C3F4682756DC717A0549F1BE3FEFC2
SHA-512:	8DAF104582547D6B3A6D8698836E279D88AD9A870E9FDD66C319ECADA3757A3997F411976461ED30A5D24436BAA7504355B49D4ACEC2F7CDFE10E1E392E0F7FB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......Y.IO.q'..q'..q'...Y..q'.:.J..q'.:.Z..q'.:.\..q'..q&..q'.:.I.#q'.:.]..q'.:.[..q'.:._..q'.Rich.q'.........PE..L.....YM...........!.........p..........................................................................................a+......P.......,.......................T9..P...................................@...............,............................text............................... ..`.rdata..............................@..@.data...........0..................@....rsrc...,...........................@..@.reloc...:.......@... ..............@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Ormolu\cxcore099.dll

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	929792
Entropy (8bit):	6.883111719944197
Encrypted:	false
SSDEEP:	24576:dNoLaQGpXDCfZCgs1ruSteHz3+AzEOyIrbnYyw:7msgUeTGIrbM
MD5:	286284D4AE1C67D0D5666B1417DCD575
SHA1:	8B8A32577051823B003C78C86054874491E9ECFA
SHA-256:	37D9A8057D58B043AD037E9905797C215CD0832D48A29731C1687B23447CE298
SHA-512:	2EFC47A8E104BAA13E19BEE3B3B3364DA09CEA80601BC87492DE348F1C8D61008002540BA8F0DF99B2D20E333D09EA8E097A87C97E91910D7D592D11A953917A
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....................&......&......&............&......&......&......&.....Rich...........PE..L...w.YM...........!......... .......................................................d..................................b(......d....@..4....................P...e......................................@...............H............................text............................... ..`.rdata..b/.......0..................@..@.data........@...p...@..............@....rsrc...4....@......................@..@.reloc...g...P...p..................@..B........................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Ormolu\cximagecrt.dll

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	498760
Entropy (8bit):	6.674124910838454
Encrypted:	false
SSDEEP:	12288:fJaqPgrHZx0Cxn0P5ASCH8aH6IAC+tITsQ8p:fkqPgr5x0Cxn0P5ASCH8aaIACDTx8p
MD5:	C36F6E088C6457A43ADB7EDCD17803F3
SHA1:	B25B9FB4C10B8421C8762C7E7B3747113D5702DE
SHA-256:	8E1243454A29998CC7DC89CAECFADC0D29E00E5776A8B5777633238B8CD66F72
SHA-512:	87CAD4C3059BD7DE02338922CF14E515AF5CAD663D473B19DD66A4C8BEFC8BCE61C9C2B5A14671BC71951FDFF345E4CA7A799250D622E2C9236EC03D74D4FE4E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......B2/..SA[.SA[.SA[..?[.SA[!.<[.SA[!.:[.SA[.S@[.SA[!.,[ISA[!./["SA[!.;[.SA[!.9[.SA[Rich.SA[................PE..L......M...........!.........`......]........ ......................................a!..................................#U..t...x....@..................H....P... ..p"..............................@...@............ ..X............................text............................... ..`.rdata....... ....... ..............@..@.data...<....0.......0..............@....rsrc........@.......@..............@..@.reloc..n!...P...0...P..............@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Ormolu\dbghelp.dll

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	489984
Entropy (8bit):	6.621181912245107
Encrypted:	false
SSDEEP:	6144:HPEKP8f7yHkluOutwm5ZNetC5IlhhM1yFWgQK7x5Iz4JxRRAuUzT/9cl84S683Wb:HPrX5ZNG2yQycw5IGxRwVc6683Wb/n
MD5:	AA1594596FA19609555E317D9B64BE6A
SHA1:	924B08D85B537BE52142965C3AD33C01B457EA83
SHA-256:	5139413EA54DEE9EC4F13B193D88CCAE9ADB8F0D8C1E2BA1AEE460D8A0D5BB79
SHA-512:	759209846039D1EFB2F6DDF3501F1F868989E81752BB7D617AFD9FD4238C52162167B1A1732EC81BDFCE469856C78439CC7C8D173B1F48DE499DFEE725B192DC
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......$..`..`..`.....I.....b..`........k......g.....p.....a......a.....w.....a..Rich`..........PE..L.....m=...........!................5l............Qm................................................................0.......$...x....P.......................`...K..@................................................................................text............................... ..`.data...,@.......*..................@....rsrc........P......................@..@.reloc...e...`...f..................@..B..m=8...(.m=C...(.m=P.......Z...(.m=f...).m=s...........msvcrt.dll.KERNEL32.dll.NTDLL.DLL.VERSION.dll.ADVAPI32.dll.RPCRT4.dll...................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Ormolu\gxfiogr

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	52497
Entropy (8bit):	4.634957678200076
Encrypted:	false
SSDEEP:	1536:eHvrL3y27GIffhDSwOT+vdBFysPqPni6ajhz:orzy2RI6vJyWqGz
MD5:	B590C33DD2A4C8DDEDDA46028181A405
SHA1:	B0949A3396D84B8E4DCA5D5026EB3B6C0679F7E3
SHA-256:	862AADCB096647394A5F6F5E646BF57B52567180505B6026E59539F6DED1EAA8
SHA-512:	E72B33CA405B551532A855A74F99AAB1850756CBAEFB9421D6E480E719B6CEEAD1D728DBC786D76D91532F0BBDCC241039DAC35479BF90F7D2D665C6AB9F8DA7
Malicious:	false
Preview:	..OK......lRL......O...O.gmXe..VZ....h.UA.tW....S.f....T..U.D.Gi.I..G..R..aw.`.HnU.....fOU...D.a...M.l`OiF`J....Ii....H.L.CdQAZ.N..F....bV.KlU.HG.Al...aP^..._`.xbN.....]...UX...s[r...GT.x.wL....BU.ev..cQ.q.......V..[Owfl.JL.gf.E...F..Xo.yd..[f.QCTjHt..Ua.y......Z.i..P.pv._V....AO.S..chT....P.D..w.ks._.wp...^D.Sy...M..a..ip`TG^a.........m.\A..hm..u..A.jd.KFPa...Gd..qWGZ....O.Y...U..._..I.FEhHWtD.].D..s.a...yeH...g..l...x....j...Xn.v.Uf....[..Dvp.c..t..V.ODI.M.].IWE.M..Td.....y.c..G_.cKI.T^X.y......I_P.d.h..CeZ..]...qHpf.A.iPtxRf...Y....Fi.pr..L.C.jRX\...Wu.F.eP.Lr.j.J.A....h..nWQ.o.[\r...V_..M..d._..`..]XM.e.Vb.PxJ.ai..I].Aqa..k.\.LL.R...O...D..uDs.fVs.i.l...S.J.f.UJT.TKcPZnUo.dZda.hm..P.anWu...n...j..d.].D...h...r.N.....Mk...e]`..wyk.e..s..M[.w..[.gA.oEY..d..W.sR.X..IdJ.X.hNrCR\.S...Mryj...w._K..r_.^`N.UDt..emtt..r.O..D.h....m.m.p.UiOY^a.........kP...FX..g..sIB..A...v...P\...I..eW..I..B.l.E..I..L.SVaHr.....y...P.......rTuj.aAnF.A.G.R..C....KF...TH.SB.Fm....Mn..LY..Mx..cBiF.G.....FQRr..

C:\Users\user\AppData\Local\Ormolu\highgui099.dll

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	397312
Entropy (8bit):	6.672405371278951
Encrypted:	false
SSDEEP:	12288:J+7gXTkVRt1dixRtVq2EjMS2E7ETstO/:JlTeRt1dSzd4MSUTsO/
MD5:	A354C42FCB37A50ECAD8DDE250F6119E
SHA1:	0EB4AD5E90D28A4A8553D82CEC53072279AF1961
SHA-256:	89DB6973F4EC5859792BCD8A50CD10DB6B847613F2CEA5ADEF740EEC141673B2
SHA-512:	981C82F6334961C54C80009B14A0C2CD48067BAF6D502560D508BE86F5185374A422609C7FDC9A2CDE9B98A7061EFAB7FD9B1F4F421436A9112833122BC35059
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......r\|..6...6...6......4......;......5....;..n......#...6..........."......7......7......7...Rich6...........PE..L.....YM...........!.........@......y........................................ .......r.............................. K..F....9..........d........................#..`...................................................D............................text............................... ..`.rdata..f...........................@..@.data...0r...`...p...`..............@....rsrc...d...........................@..@.reloc...$.......0..................@..B........................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Ormolu\rsjddfw

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	1278922
Entropy (8bit):	7.9466610285204435
Encrypted:	false
SSDEEP:	24576:W+gdayUfr7FQna28ZHcDy9mulSKpgcgpXzoIE7EH6KmNnRYu:W01TnftcNK3IqQ6Kcl
MD5:	2139118B4760969B3A7DF8D1ABF9C26F
SHA1:	A076EE81FAC8DF2508E72C918FF2AD45D8BF8281
SHA-256:	F2158D2632256E1E8D6CD855937FF9B3D8AC738D993FB0BE976880A8692D76EB
SHA-512:	5104382AA96D6C5D3C3B2A43EF465B1D690EF59CA4660FC026943B7C44CAFB0BC569031A66EF9C10CBD119EB361B3B84FB7C190BA28C2588C34CD9C6472C0833
Malicious:	false
Preview:	.k.V.S`......PF.].b....Wk[..u.BoqoJuDx.mg.....m.....O..C.fH.K.]u..Qo^.l....q.N....n.I.J.Y..L..h_.....HW_...D....J.`.a..Vm........BfX.X....vy.....y.vwl.......rYN...Ushgu.ZF......JIy.\W...Q.D..v.a.NBJ..g..Eg.liM.J...........`..^.Ix.dUQ.Ge[TE.vOL\WNU._G.KZl..A..g....INxN...[g..I.Y.G.MBS.y.vYne...`.GK.IT.E....YD..D.o.....h...`.vI.w.ec..a.atBVfu..MSLq..p.b`B..I.....c.C..M...`BMmX..KU].....m[T...CZF.......m.h....v.wNFAN...^.m.mvSMv....hg...W.X`.n....MSr..Ho.A.S..[R...xq_.e...Q.vSp......ec.V..A.g....W.j.sPQYL........[.R_ZJ.Ix.YqT..DKGl.b]M.T.`.S..CS.l.....Z....i.Rh..BJy..^oxu.u..Y.................w..b...Ha..A..x....dl.Xl.Hxb..y.M.Hm..ta..a..M..Y`..u.tr....Y.WAnPEbLkx].dn.yW...O...y.H....CT.`I_..C[OI[x.k..pZa..IVJ..u....hKYw.....\gC.....bi.ck...[Hl..YllOa.O[Y..s.a.hIq.f...oW.X..x.O^..Ub[UD.TX..l.]..Gs.._.mw.x..K.vx].RfNq.L...`.s..W[..Gt..UjG..RaNIoBm`...FYn.f.]..Mx\T.w...WUhNjrEo\o[...k.L.i...i.qIev.[...frF.C..U.b.j.FQG...U.gWxI...N.f_.c.L.d.a.....[.....y..Gy.n.v.Th.X..x.[..V.PjT.[...N....UKI.

C:\Users\user\AppData\Local\Temp\804a2825

Download File

Process:	C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe
File Type:	data
Category:	dropped
Size (bytes):	1518325
Entropy (8bit):	7.743288449447517
Encrypted:	false
SSDEEP:	24576:jjz0TVEoPZ0aM3krtM3WwK/xfrHUnQhJJ8s48effSrspTn7DnWhVBFv+2ojBi0ii:/z8VEoPuD9YfrV8dtKrKLIBwBi0ii
MD5:	3F3CF680F3C51868F42A28688CDFD32A
SHA1:	0BC9910032D4E5CD201A80D40D036BAB04EAAF7F
SHA-256:	8E307CBBB55185635BFB2770B072C00D33E8C273C62102C048ADF98124FB0DDA
SHA-512:	FC10703DB5A0D07F3FD14D382328F33A7ECD2E2A92A8B33C9C723C2CAA31048ACF757D93E148C7D78394EF62A50CE6FA2B4929B1A92E40A0410EB909BD6E63B3
Malicious:	false
Preview:	gpe.epe.dpe.dpe.epe.@pe.ppe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpd.A15J 11[A,(s...i...F3..~...F7..h.P(...9J...h...F7..h....dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.'.,t...{....!.e.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.'.&h....-..n....dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.A',T 97?8=.y...u..KT!$9\.......qdpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe..BK*JEU-VGe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.

C:\Users\user\AppData\Local\Temp\8f084743

Download File

Process:	C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe
File Type:	data
Category:	dropped
Size (bytes):	1518325
Entropy (8bit):	7.7432881779098715
Encrypted:	false
SSDEEP:	24576:Njz0TVEoPZ0aM3krtM3WwK/xfrHUnQhJJ8s48effSrspTn7DnWhVBFv+2ojBi0ii:Jz8VEoPuD9YfrV8dtKrKLIBwBi0ii
MD5:	3CBC6AE10EE247736594D687E24C4C60
SHA1:	2E77369C4CC98763899F6B6E917903E5C41B41FB
SHA-256:	1A1B690504044927405943F8096A180C44CECBFCE37345A11369A46500F562FC
SHA-512:	4277658BC9AEAD97F0B77FD1018BE2294242F23D4D950E56C10147C4AE212D3C54CE0E20DC40F07CBD68B10B65AD2A9266A17DC860F6B3E70D39BCD56CB1CF97
Malicious:	false
Preview:	gpe.epe.dpe.dpe.epe.@pe.ppe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpd.A15J 11[A,(s...i...F3..~...F7..h.P(...9J...h...F7..h....dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.'.,t...{....!.e.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.'.&h....-..n....dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.A',T 97?8=.y...u..KT!$9\.......qdpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe..BK*JEU-VGe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.dpe.

C:\Users\user\AppData\Local\Temp\exuquepx

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Fri Oct 18 09:09:10 2024, mtime=Fri Oct 18 09:09:10 2024, atime=Wed Oct 9 15:39:50 2024, length=1756232, window=hide
Category:	dropped
Size (bytes):	912
Entropy (8bit):	5.027718814840465
Encrypted:	false
SSDEEP:	12:8cVExo4jgpnu8ChiXlXIsY//otxL+XTb9rgoDcYjAl+HXhIJ+Iv91i8mV:8cV2jIDXXlXU++n9xQ8AliIR3pm
MD5:	21EE9A4ACAAC1C7A164EB4D13A9E7FF2
SHA1:	3E5E2D4BC1E1B2376A0ABA718FBEBB89D88928B6
SHA-256:	E30CE5E908C31D43A0F33A37D0D0128D6905638E033AA96F02D97A96F1E5B81A
SHA-512:	243A2B301A1799E27F8449B62297E080B4A08D601745C2D122728DEF8130308FDD7E575D7BC6A403A68C06E07138FBF84FC13D72C0CF20EF684BCE30AC5E872F
Malicious:	false
Preview:	L..................F.... .....B.E!...yW.E!......i...H.........................:..DG..Yr?.D..U..k0.&...&.......$..S.....B.E!..lp".E!......t...CFSF..1.....EW<2..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......EW<2RY#Q...........................^.A.p.p.D.a.t.a...B.V.1.....RY%Q..Roaming.@......EW<2RY&Q..../......................`..R.o.a.m.i.n.g.....f.1.....RY&Q..DEMOAR~1..N......RY%QRY&Q...........................h&.d.e.m.o.A.r.c.h.i.v.e.b.c.z.....b.2.H...IY.. .ManyCam.exe.H......RY&QRY&Q.... .........................M.a.n.y.C.a.m...e.x.e.......k...............-.......j.............?M.....C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe..(.....\.....\.R.o.a.m.i.n.g.\.d.e.m.o.A.r.c.h.i.v.e.b.c.z.\.M.a.n.y.C.a.m...e.x.e.`.......X.......688098...........hT..CrF.f4... .....Jc...-...-$..hT..CrF.f4... .....Jc...-...-$.E.......9...1SPS..mD..pH.H@..=x.....h....H.....K...YM...?................

C:\Users\user\AppData\Local\Temp\ndae

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	786944
Entropy (8bit):	6.8093051984085005
Encrypted:	false
SSDEEP:	12288:LvsXZv8km0OHcbGbvzWHz0HnquwTa+S0ssFWylkkoAbtE1/wfNqbYS2VbICKMIUX:0fPz0HIDS0ssFlSjx4b
MD5:	4BBDA200E71F052B7AFC6C24CA47054B
SHA1:	B18C1059FF61B0C469C2805EFBD514A05A95B602
SHA-256:	B081A923A9E80FF40F51F3D2C2F231863E3A2E1B13E744CA8F6ACF13987C401A
SHA-512:	30BF7A7A5B705FF359A18AF265AED8B38635751F9BE592E840233EA85678AC2D0FB14850367096D5CB5E0A9EB7452D22EFE8F4E6543BD52478CD8FCDA6D323B6
Malicious:	true
Yara Hits:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: C:\Users\user\AppData\Local\Temp\ndae, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: C:\Users\user\AppData\Local\Temp\ndae, Author: Joe Security Rule: MALWARE_Win_Arechclient2, Description: Detects Arechclient2 RAT, Source: C:\Users\user\AppData\Local\Temp\ndae, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....\................................. ........@.. .......................`..............................................T...W.... .......................@....................................................... ............... ..H............text........ ...................... ..`.rsrc........ ......................@..@.reloc.......@......................@..B........................H.......L....>..........T...@............................................0............. ....X..%-.&sp...sq...}-..... ....Y.~-.....UY.).... .....7...%.....~,.....[Y.)....sr...~-.....TY.)....os.........%.~t.... ....X~t.... ....X~t.... ....X(.....%.~-.....SY.)......~-.....RY.)....~0...%-.&~/.........su...%.0...(...+}.....0........... ....X..{M.....0............(..... .p..Y. ...@\...\a..Z3.+.~t.... .M..X+2~...... ....^ ...l_.3.+. 4.rc H:;..+.~t.... ...X..#.......@. ..... ....\

C:\Users\user\AppData\Local\Temp\svubpwldttjkvt

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	786944
Entropy (8bit):	6.8093051984085005
Encrypted:	false
SSDEEP:	12288:LvsXZv8km0OHcbGbvzWHz0HnquwTa+S0ssFWylkkoAbtE1/wfNqbYS2VbICKMIUX:0fPz0HIDS0ssFlSjx4b
MD5:	4BBDA200E71F052B7AFC6C24CA47054B
SHA1:	B18C1059FF61B0C469C2805EFBD514A05A95B602
SHA-256:	B081A923A9E80FF40F51F3D2C2F231863E3A2E1B13E744CA8F6ACF13987C401A
SHA-512:	30BF7A7A5B705FF359A18AF265AED8B38635751F9BE592E840233EA85678AC2D0FB14850367096D5CB5E0A9EB7452D22EFE8F4E6543BD52478CD8FCDA6D323B6
Malicious:	true
Yara Hits:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: C:\Users\user\AppData\Local\Temp\svubpwldttjkvt, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: C:\Users\user\AppData\Local\Temp\svubpwldttjkvt, Author: Joe Security Rule: MALWARE_Win_Arechclient2, Description: Detects Arechclient2 RAT, Source: C:\Users\user\AppData\Local\Temp\svubpwldttjkvt, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....\................................. ........@.. .......................`..............................................T...W.... .......................@....................................................... ............... ..H............text........ ...................... ..`.rsrc........ ......................@..@.reloc.......@......................@..B........................H.......L....>..........T...@............................................0............. ....X..%-.&sp...sq...}-..... ....Y.~-.....UY.).... .....7...%.....~,.....[Y.)....sr...~-.....TY.)....os.........%.~t.... ....X~t.... ....X~t.... ....X(.....%.~-.....SY.)......~-.....RY.)....~0...%-.&~/.........su...%.0...(...+}.....0........... ....X..{M.....0............(..... .p..Y. ...@\...\a..Z3.+.~t.... .M..X+2~...... ....^ ...l_.3.+. 4.rc H:;..+.~t.... ...X..#.......@. ..... ....\

C:\Users\user\AppData\Roaming\demoArchivebcz\CrashRpt.dll

Download File

Process:	C:\Users\user\AppData\Local\Ormolu\ManyCam.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	123976
Entropy (8bit):	6.382577198291231
Encrypted:	false
SSDEEP:	3072:fzjKVg7GOfS5SqPcCXA4SQlah+8Z4OAAHWTtopW+Z:fzjKVg7GOESqPcCXxT8hhZ4OAAHW2Wa
MD5:	B2D1F5E4A1F0E8D85F0A8AEB7B8148C7
SHA1:	871078213FCC0CE143F518BD69CAA3156B385415
SHA-256:	C28E0AEC124902E948C554436C0EBBEBBA9FC91C906CE2CD887FADA0C64E3386
SHA-512:	1F6D97E02CD684CF4F4554B0E819196BD2811E19B964A680332268BCBB6DEE0E17B2B35B6E66F0FE5622DFFB0A734F39F8E49637A38E4FE7F10D3B5182B30260
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......................W.....U.....U.............U.......U.......U.....U.....U....Rich....................PE..L.....M...........!................'........ ......................................Gb..............................P........t..........d%..............H...........`$..............................0W..@............ ...............................text...8........................... ..`.rdata../l... ...n..................@..@.data...t...........................@....rsrc...d%.......&..................@..@.reloc..............................@..B........................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe

Download File

Process:	C:\Users\user\AppData\Local\Ormolu\ManyCam.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1756232
Entropy (8bit):	6.047140524753333
Encrypted:	false
SSDEEP:	49152:wlkcF8MnJ6tdGeHzpNTxlSvQynZAWBM2FU+SrzcBsWLZF5:wlf8MnJ6tdGeHzpNTxlSvfnOWC6U5Ed5
MD5:	BA699791249C311883BAA8CE3432703B
SHA1:	F8734601F9397CB5EBB8872AF03F5B0639C2EAC6
SHA-256:	7C4EB51A737A81C163F95B50EC54518B82FCF91389D0560E855F3E26CEC07282
SHA-512:	6A0386424C61FBF525625EBE53BB2193ACCD51C2BE9A2527FD567D0A6E112B0D1A047D8F7266D706B726E9C41EA77496E1EDE186A5E59F5311EEEA829A302325
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........3...R..R..R..f]..R..2...R....R....R....R....R..R..Q.....R....R....R..Rich.R..........................PE..L...e..M............................\|B............@.................................f.........P......................................@..................H............................................d..@............................................text...b........................... ..`.rdata..B...........................@..@.data........P.......P..............@....rsrc........@......................@..@................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\demoArchivebcz\cv099.dll

Download File

Process:	C:\Users\user\AppData\Local\Ormolu\ManyCam.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	679936
Entropy (8bit):	6.674616014554414
Encrypted:	false
SSDEEP:	12288:dHxL34kbwAQR5+ERTJGZfnpyvhZFjtJbPbwQjtX5ooVyPMDFdqvGHjucsEUNwm/7:dzbwAQR57RJGoxjP7/2+HINwwb
MD5:	2A8B33FEE2F84490D52A3A7C75254971
SHA1:	16CE2B1632A17949B92CE32A6211296FEE431DCA
SHA-256:	FAFF6A0745E1720413A028F77583FFF013C3F4682756DC717A0549F1BE3FEFC2
SHA-512:	8DAF104582547D6B3A6D8698836E279D88AD9A870E9FDD66C319ECADA3757A3997F411976461ED30A5D24436BAA7504355B49D4ACEC2F7CDFE10E1E392E0F7FB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......Y.IO.q'..q'..q'...Y..q'.:.J..q'.:.Z..q'.:.\..q'..q&..q'.:.I.#q'.:.]..q'.:.[..q'.:._..q'.Rich.q'.........PE..L.....YM...........!.........p..........................................................................................a+......P.......,.......................T9..P...................................@...............,............................text............................... ..`.rdata..............................@..@.data...........0..................@....rsrc...,...........................@..@.reloc...:.......@... ..............@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\demoArchivebcz\cxcore099.dll

Download File

Process:	C:\Users\user\AppData\Local\Ormolu\ManyCam.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	929792
Entropy (8bit):	6.883111719944197
Encrypted:	false
SSDEEP:	24576:dNoLaQGpXDCfZCgs1ruSteHz3+AzEOyIrbnYyw:7msgUeTGIrbM
MD5:	286284D4AE1C67D0D5666B1417DCD575
SHA1:	8B8A32577051823B003C78C86054874491E9ECFA
SHA-256:	37D9A8057D58B043AD037E9905797C215CD0832D48A29731C1687B23447CE298
SHA-512:	2EFC47A8E104BAA13E19BEE3B3B3364DA09CEA80601BC87492DE348F1C8D61008002540BA8F0DF99B2D20E333D09EA8E097A87C97E91910D7D592D11A953917A
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....................&......&......&............&......&......&......&.....Rich...........PE..L...w.YM...........!......... .......................................................d..................................b(......d....@..4....................P...e......................................@...............H............................text............................... ..`.rdata..b/.......0..................@..@.data........@...p...@..............@....rsrc...4....@......................@..@.reloc...g...P...p..................@..B........................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\demoArchivebcz\cximagecrt.dll

Download File

Process:	C:\Users\user\AppData\Local\Ormolu\ManyCam.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	498760
Entropy (8bit):	6.674124910838454
Encrypted:	false
SSDEEP:	12288:fJaqPgrHZx0Cxn0P5ASCH8aH6IAC+tITsQ8p:fkqPgr5x0Cxn0P5ASCH8aaIACDTx8p
MD5:	C36F6E088C6457A43ADB7EDCD17803F3
SHA1:	B25B9FB4C10B8421C8762C7E7B3747113D5702DE
SHA-256:	8E1243454A29998CC7DC89CAECFADC0D29E00E5776A8B5777633238B8CD66F72
SHA-512:	87CAD4C3059BD7DE02338922CF14E515AF5CAD663D473B19DD66A4C8BEFC8BCE61C9C2B5A14671BC71951FDFF345E4CA7A799250D622E2C9236EC03D74D4FE4E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......B2/..SA[.SA[.SA[..?[.SA[!.<[.SA[!.:[.SA[.S@[.SA[!.,[ISA[!./["SA[!.;[.SA[!.9[.SA[Rich.SA[................PE..L......M...........!.........`......]........ ......................................a!..................................#U..t...x....@..................H....P... ..p"..............................@...@............ ..X............................text............................... ..`.rdata....... ....... ..............@..@.data...<....0.......0..............@....rsrc........@.......@..............@..@.reloc..n!...P...0...P..............@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\demoArchivebcz\dbghelp.dll

Download File

Process:	C:\Users\user\AppData\Local\Ormolu\ManyCam.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	489984
Entropy (8bit):	6.621181912245107
Encrypted:	false
SSDEEP:	6144:HPEKP8f7yHkluOutwm5ZNetC5IlhhM1yFWgQK7x5Iz4JxRRAuUzT/9cl84S683Wb:HPrX5ZNG2yQycw5IGxRwVc6683Wb/n
MD5:	AA1594596FA19609555E317D9B64BE6A
SHA1:	924B08D85B537BE52142965C3AD33C01B457EA83
SHA-256:	5139413EA54DEE9EC4F13B193D88CCAE9ADB8F0D8C1E2BA1AEE460D8A0D5BB79
SHA-512:	759209846039D1EFB2F6DDF3501F1F868989E81752BB7D617AFD9FD4238C52162167B1A1732EC81BDFCE469856C78439CC7C8D173B1F48DE499DFEE725B192DC
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......$..`..`..`.....I.....b..`........k......g.....p.....a......a.....w.....a..Rich`..........PE..L.....m=...........!................5l............Qm................................................................0.......$...x....P.......................`...K..@................................................................................text............................... ..`.data...,@.......*..................@....rsrc........P......................@..@.reloc...e...`...f..................@..B..m=8...(.m=C...(.m=P.......Z...(.m=f...).m=s...........msvcrt.dll.KERNEL32.dll.NTDLL.DLL.VERSION.dll.ADVAPI32.dll.RPCRT4.dll...................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\demoArchivebcz\gxfiogr

Download File

Process:	C:\Users\user\AppData\Local\Ormolu\ManyCam.exe
File Type:	data
Category:	dropped
Size (bytes):	52497
Entropy (8bit):	4.634957678200076
Encrypted:	false
SSDEEP:	1536:eHvrL3y27GIffhDSwOT+vdBFysPqPni6ajhz:orzy2RI6vJyWqGz
MD5:	B590C33DD2A4C8DDEDDA46028181A405
SHA1:	B0949A3396D84B8E4DCA5D5026EB3B6C0679F7E3
SHA-256:	862AADCB096647394A5F6F5E646BF57B52567180505B6026E59539F6DED1EAA8
SHA-512:	E72B33CA405B551532A855A74F99AAB1850756CBAEFB9421D6E480E719B6CEEAD1D728DBC786D76D91532F0BBDCC241039DAC35479BF90F7D2D665C6AB9F8DA7
Malicious:	false
Preview:	..OK......lRL......O...O.gmXe..VZ....h.UA.tW....S.f....T..U.D.Gi.I..G..R..aw.`.HnU.....fOU...D.a...M.l`OiF`J....Ii....H.L.CdQAZ.N..F....bV.KlU.HG.Al...aP^..._`.xbN.....]...UX...s[r...GT.x.wL....BU.ev..cQ.q.......V..[Owfl.JL.gf.E...F..Xo.yd..[f.QCTjHt..Ua.y......Z.i..P.pv._V....AO.S..chT....P.D..w.ks._.wp...^D.Sy...M..a..ip`TG^a.........m.\A..hm..u..A.jd.KFPa...Gd..qWGZ....O.Y...U..._..I.FEhHWtD.].D..s.a...yeH...g..l...x....j...Xn.v.Uf....[..Dvp.c..t..V.ODI.M.].IWE.M..Td.....y.c..G_.cKI.T^X.y......I_P.d.h..CeZ..]...qHpf.A.iPtxRf...Y....Fi.pr..L.C.jRX\...Wu.F.eP.Lr.j.J.A....h..nWQ.o.[\r...V_..M..d._..`..]XM.e.Vb.PxJ.ai..I].Aqa..k.\.LL.R...O...D..uDs.fVs.i.l...S.J.f.UJT.TKcPZnUo.dZda.hm..P.anWu...n...j..d.].D...h...r.N.....Mk...e]`..wyk.e..s..M[.w..[.gA.oEY..d..W.sR.X..IdJ.X.hNrCR\.S...Mryj...w._K..r_.^`N.UDt..emtt..r.O..D.h....m.m.p.UiOY^a.........kP...FX..g..sIB..A...v...P\...I..eW..I..B.l.E..I..L.SVaHr.....y...P.......rTuj.aAnF.A.G.R..C....KF...TH.SB.Fm....Mn..LY..Mx..cBiF.G.....FQRr..

C:\Users\user\AppData\Roaming\demoArchivebcz\highgui099.dll

Download File

Process:	C:\Users\user\AppData\Local\Ormolu\ManyCam.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	397312
Entropy (8bit):	6.672405371278951
Encrypted:	false
SSDEEP:	12288:J+7gXTkVRt1dixRtVq2EjMS2E7ETstO/:JlTeRt1dSzd4MSUTsO/
MD5:	A354C42FCB37A50ECAD8DDE250F6119E
SHA1:	0EB4AD5E90D28A4A8553D82CEC53072279AF1961
SHA-256:	89DB6973F4EC5859792BCD8A50CD10DB6B847613F2CEA5ADEF740EEC141673B2
SHA-512:	981C82F6334961C54C80009B14A0C2CD48067BAF6D502560D508BE86F5185374A422609C7FDC9A2CDE9B98A7061EFAB7FD9B1F4F421436A9112833122BC35059
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......r\|..6...6...6......4......;......5....;..n......#...6..........."......7......7......7...Rich6...........PE..L.....YM...........!.........@......y........................................ .......r.............................. K..F....9..........d........................#..`...................................................D............................text............................... ..`.rdata..f...........................@..@.data...0r...`...p...`..............@....rsrc...d...........................@..@.reloc...$.......0..................@..B........................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\demoArchivebcz\rsjddfw

Download File

Process:	C:\Users\user\AppData\Local\Ormolu\ManyCam.exe
File Type:	data
Category:	dropped
Size (bytes):	1278922
Entropy (8bit):	7.9466610285204435
Encrypted:	false
SSDEEP:	24576:W+gdayUfr7FQna28ZHcDy9mulSKpgcgpXzoIE7EH6KmNnRYu:W01TnftcNK3IqQ6Kcl
MD5:	2139118B4760969B3A7DF8D1ABF9C26F
SHA1:	A076EE81FAC8DF2508E72C918FF2AD45D8BF8281
SHA-256:	F2158D2632256E1E8D6CD855937FF9B3D8AC738D993FB0BE976880A8692D76EB
SHA-512:	5104382AA96D6C5D3C3B2A43EF465B1D690EF59CA4660FC026943B7C44CAFB0BC569031A66EF9C10CBD119EB361B3B84FB7C190BA28C2588C34CD9C6472C0833
Malicious:	false
Preview:	.k.V.S`......PF.].b....Wk[..u.BoqoJuDx.mg.....m.....O..C.fH.K.]u..Qo^.l....q.N....n.I.J.Y..L..h_.....HW_...D....J.`.a..Vm........BfX.X....vy.....y.vwl.......rYN...Ushgu.ZF......JIy.\W...Q.D..v.a.NBJ..g..Eg.liM.J...........`..^.Ix.dUQ.Ge[TE.vOL\WNU._G.KZl..A..g....INxN...[g..I.Y.G.MBS.y.vYne...`.GK.IT.E....YD..D.o.....h...`.vI.w.ec..a.atBVfu..MSLq..p.b`B..I.....c.C..M...`BMmX..KU].....m[T...CZF.......m.h....v.wNFAN...^.m.mvSMv....hg...W.X`.n....MSr..Ho.A.S..[R...xq_.e...Q.vSp......ec.V..A.g....W.j.sPQYL........[.R_ZJ.Ix.YqT..DKGl.b]M.T.`.S..CS.l.....Z....i.Rh..BJy..^oxu.u..Y.................w..b...Ha..A..x....dl.Xl.Hxb..y.M.Hm..ta..a..M..Y`..u.tr....Y.WAnPEbLkx].dn.yW...O...y.H....CT.`I_..C[OI[x.k..pZa..IVJ..u....hKYw.....\gC.....bi.ck...[Hl..YllOa.O[Y..s.a.hIq.f...oW.X..x.O^..Ub[UD.TX..l.]..Gs.._.mw.x..K.vx].RfNq.L...`.s..W[..Gt..UjG..RaNIoBm`...FYn.f.]..Mx\T.w...WUhNjrEo\o[...k.L.i...i.qIev.[...frF.C..U.b.j.FQG...U.gWxI...N.f_.c.L.d.a.....[.....y..Gy.n.v.Th.X..x.[..V.PjT.[...N....UKI.

C:\Windows\Installer\6c18e9.msi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Semolina, Author: Kwela Eirenicon, Keywords: Installer, Comments: This installer database contains the logic and data required to install Semolina., Template: Intel;1033, Revision Number: {E399BBE4-4063-457E-BB84-F6CBF9E31491}, Create Time/Date: Wed Oct 9 11:42:28 2024, Last Saved Time/Date: Wed Oct 9 11:42:28 2024, Number of Pages: 500, Number of Words: 10, Name of Creating Application: WiX Toolset (4.0.0.0), Security: 2
Category:	dropped
Size (bytes):	2990080
Entropy (8bit):	7.994851151194348
Encrypted:	true
SSDEEP:	49152:NiSoOl+YyNuCClJkqr6zeM4I/157fW8KvSu784p0mKZ+nYxgrFUhmnb+t1cVDUqb:Nt7+YJCCvkP4Id59Kvv8KGZgYyyuqtUF
MD5:	D87CC5FB2D4047D442446CC6D2D01CF9
SHA1:	8D2C76BB8248B1C8171C4CC198255D5613AFE6FE
SHA-256:	AFBDAA974CDC9624FE94B5C0CA6CE01695570790A68CC9C86EA0619973F13D07
SHA-512:	542E85C82BB770F8E4C6415597330D541BE2A21C1E95F83C9E57DB5DF123255BE831F4BEAB56F7211DD1B7C3823838CE3526FA16AE81F5D9BF4767AB46217333
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\6c18eb.msi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Semolina, Author: Kwela Eirenicon, Keywords: Installer, Comments: This installer database contains the logic and data required to install Semolina., Template: Intel;1033, Revision Number: {E399BBE4-4063-457E-BB84-F6CBF9E31491}, Create Time/Date: Wed Oct 9 11:42:28 2024, Last Saved Time/Date: Wed Oct 9 11:42:28 2024, Number of Pages: 500, Number of Words: 10, Name of Creating Application: WiX Toolset (4.0.0.0), Security: 2
Category:	dropped
Size (bytes):	2990080
Entropy (8bit):	7.994851151194348
Encrypted:	true
SSDEEP:	49152:NiSoOl+YyNuCClJkqr6zeM4I/157fW8KvSu784p0mKZ+nYxgrFUhmnb+t1cVDUqb:Nt7+YJCCvkP4Id59Kvv8KGZgYyyuqtUF
MD5:	D87CC5FB2D4047D442446CC6D2D01CF9
SHA1:	8D2C76BB8248B1C8171C4CC198255D5613AFE6FE
SHA-256:	AFBDAA974CDC9624FE94B5C0CA6CE01695570790A68CC9C86EA0619973F13D07
SHA-512:	542E85C82BB770F8E4C6415597330D541BE2A21C1E95F83C9E57DB5DF123255BE831F4BEAB56F7211DD1B7C3823838CE3526FA16AE81F5D9BF4767AB46217333
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI1A22.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	3695
Entropy (8bit):	5.5937009213043005
Encrypted:	false
SSDEEP:	96:KrvTW1ovYywIVN43wlwucceYwRFe66mhEPk:KrvqovYy3N43wlwBdYwre69Wk
MD5:	699E64B80B940362DD380AF3C489BCC4
SHA1:	6613B9B02EA55D7C6787A49F24A80B778CCB0F26
SHA-256:	BB1849F72B52B0D7F2971CD29BC70250553AF9FD274139CC369EFDDDE51C1AFA
SHA-512:	EC8661A952AAE78F0F7508DBEE8297D3AAE11964E97811954ECB0CCB35377DFF3FCE8ACBE0090966E2FA68B42A72A03EDBC08103E542F7D8DFE9631FCF81EB94
Malicious:	false
Preview:	...@IXOS.@.....@%1RY.@.....@.....@.....@.....@.....@......&.{39F520E4-6237-4FBB-8F2E-71C60962EC87}..Semolina..iieCxV2b1n.msi.@.....@.....@.....@........&.{E399BBE4-4063-457E-BB84-F6CBF9E31491}.....@.....@.....@.....@.......@.....@.....@.......@......Semolina......Rollback..Rolling back action:..[1]..RollbackCleanup..Removing backup files..File: [1]...@.......@........ProcessComponents..Updating component registration.....@.....@.....@.]....&.{B37DA261-36A5-597F-B90E-14643815DD3F}3.C:\Users\user\AppData\Local\Ormolu\CrashRpt.dll.@.......@.....@.....@......&.{01777F62-C15D-537F-B867-A105757598CC}0.C:\Users\user\AppData\Local\Ormolu\cv099.dll.@.......@.....@.....@......&.{F5856D97-A8B7-56FE-BA74-BB930645DCB5}4.C:\Users\user\AppData\Local\Ormolu\cxcore099.dll.@.......@.....@.....@......&.{DB4A112C-2E3F-55B3-8357-06E2A31DB6D5}5.C:\Users\user\AppData\Local\Ormolu\cximagecrt.dll.@.......@.....@.....@......&.{6516AD08-BA4C-540A-B36A-22BF69D89E2F}2.C:\Users\user\AppData\Loca

C:\Windows\Installer\SourceHash{39F520E4-6237-4FBB-8F2E-71C60962EC87}

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.1642572466525336
Encrypted:	false
SSDEEP:	12:JSbX72Fj7QAGiLIlHVRpZh/7777777777777777777777777vDHFCg+JJByTit/z:JdQQI5tsBniF
MD5:	F32502564B29EA6FEBAB5E6F6D29A9C3
SHA1:	0558C8ED9D2B2758A6A01555E592A9C5AE465843
SHA-256:	D6F11DF107DE65DF2A2BE15F08FC86F34DA5DC2E9645C856FFC1D4E835B196B9
SHA-512:	C040959267DB5E6DE3595934EA0DC000C8AEBA19A19C614D4C42BAAEB9A567EC067CEC967C8D1F846085ADD41E28A4D894678412FD7761179560A5EA228CDB5E
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\inprogressinstallinfo.ipi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.473870777595151
Encrypted:	false
SSDEEP:	48:yt8PhMuRc06WXJSFT5m54qOgS5vrUgSIM9idta:yQhM1JFTGvr2Ywfa
MD5:	D50777159FE335774A88BAC4AFA5AD9E
SHA1:	879E1DFEA66236589932D32CA08C538273A2C950
SHA-256:	EC3FDABA326668208C4E75E74551D6B61D13A8203CDC34041803342658DB55F5
SHA-512:	3540B7859E93CF4E712DF28C5C07E43D42B0EA3F1C9E144A534094965EFB69C95CDDD86DBD71E65B3B4177C8EBFD2E2CBD6DB8DADAD1BB1593FB5DAEF8C1D891
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	360001
Entropy (8bit):	5.362977829898192
Encrypted:	false
SSDEEP:	1536:6qELG7gK+RaOOp3LCCpfmLgYI66xgFF9Sq8K6MAS2OMUHl6Gin327D22A26KgauK:zTtbmkExhMJCIpEb
MD5:	8E65CE809FB39628A3D5C604209B56B2
SHA1:	726A271778B35E04A867794106A2C0BF5EE7D2E1
SHA-256:	3AF3A291FEC50365E6237D0A5B57341E053576AB8B6CA2038C41B347DB0DC346
SHA-512:	741136EEB3EE78127EEF7DF4EEE76B97AC05FFFC801EDB07B47D5E195DF2837088A62D95DD889301D3500450AAF5EFE23DDB8B6B1B6D1938FC77067DD4B69288
Malicious:	false
Preview:	.To learn about increasing the verbosity of the NGen log files please see http://go.microsoft.com/fwlink/?linkid=210113..12/07/2019 14:54:22.458 [5488]: Command line: D:\wd\compilerTemp\BMT.200yuild.1bk\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe executeQueuedItems /nologo ..12/07/2019 14:54:22.473 [5488]: Executing command from offline queue: install "System.Runtime.WindowsRuntime.UI.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil" /NoDependencies /queue:1..12/07/2019 14:54:22.490 [5488]: Executing command from offline queue: install "System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil" /NoDependencies /queue:3..12/07/2019 14:54:22.490 [5488]: Exclusion list entry found for System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil; it will not be installed..12/07/2019 14:54:22.490 [

C:\Windows\Temp\~DF0990806D57BC3AEC.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.473870777595151
Encrypted:	false
SSDEEP:	48:yt8PhMuRc06WXJSFT5m54qOgS5vrUgSIM9idta:yQhM1JFTGvr2Ywfa
MD5:	D50777159FE335774A88BAC4AFA5AD9E
SHA1:	879E1DFEA66236589932D32CA08C538273A2C950
SHA-256:	EC3FDABA326668208C4E75E74551D6B61D13A8203CDC34041803342658DB55F5
SHA-512:	3540B7859E93CF4E712DF28C5C07E43D42B0EA3F1C9E144A534094965EFB69C95CDDD86DBD71E65B3B4177C8EBFD2E2CBD6DB8DADAD1BB1593FB5DAEF8C1D891
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF14890820A40800E0.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF3044E6FF2211BFB4.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	69632
Entropy (8bit):	0.10807956094201714
Encrypted:	false
SSDEEP:	24:1F8caSd8M9fgipVQgipV7VgwGKlrkgRqj+C:VaSd8M9fgS6gS5vrRqjd
MD5:	B140642D48C93D7D222A266795DE597A
SHA1:	4CCF08F0CACC897C27F307EFE966A2E3FEBA8FF3
SHA-256:	083BBED212BB03F208D16622E29EEA800553E58ABFFBA6275BEC38A5709B929C
SHA-512:	0B4C92359921D06F4D5C0EE9A6983602D21FF804A71E74D21B315FA3C4518E443A01D1509C6E5ED95FC674CA7D77F53814381D27773E881E10E2B3A7A833F748
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF46874C96EA2F3823.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF49307B85DBB1A515.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.187225565734817
Encrypted:	false
SSDEEP:	48:cntkuZPveFXJjT5M54qOgS5vrUgSIM9idta:ctkv7T0vr2Ywfa
MD5:	21D137DDA7F2B59D3AB01E0F3E586EB8
SHA1:	5277AD995E85AEDD5CBCC58CF70C04DB1D0189C0
SHA-256:	1BB634D0E8C19FDACA229F52A6AE503FE5D28EE00C423108CC625140123417D1
SHA-512:	66E275813538C8C0D0421FE722A340867B5FE9011B304684742CB0C8EE0A7EF163AC88919D92E221B908329BD6B04926BEA301311E3C65300EFABFDD454C256C
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF551A278F797377D0.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.187225565734817
Encrypted:	false
SSDEEP:	48:cntkuZPveFXJjT5M54qOgS5vrUgSIM9idta:ctkv7T0vr2Ywfa
MD5:	21D137DDA7F2B59D3AB01E0F3E586EB8
SHA1:	5277AD995E85AEDD5CBCC58CF70C04DB1D0189C0
SHA-256:	1BB634D0E8C19FDACA229F52A6AE503FE5D28EE00C423108CC625140123417D1
SHA-512:	66E275813538C8C0D0421FE722A340867B5FE9011B304684742CB0C8EE0A7EF163AC88919D92E221B908329BD6B04926BEA301311E3C65300EFABFDD454C256C
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF8B2F9407D39D8958.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.187225565734817
Encrypted:	false
SSDEEP:	48:cntkuZPveFXJjT5M54qOgS5vrUgSIM9idta:ctkv7T0vr2Ywfa
MD5:	21D137DDA7F2B59D3AB01E0F3E586EB8
SHA1:	5277AD995E85AEDD5CBCC58CF70C04DB1D0189C0
SHA-256:	1BB634D0E8C19FDACA229F52A6AE503FE5D28EE00C423108CC625140123417D1
SHA-512:	66E275813538C8C0D0421FE722A340867B5FE9011B304684742CB0C8EE0A7EF163AC88919D92E221B908329BD6B04926BEA301311E3C65300EFABFDD454C256C
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF98277DCBF98DF427.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF9D929FC9F6DAB395.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFBCF32403695355B2.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.473870777595151
Encrypted:	false
SSDEEP:	48:yt8PhMuRc06WXJSFT5m54qOgS5vrUgSIM9idta:yQhM1JFTGvr2Ywfa
MD5:	D50777159FE335774A88BAC4AFA5AD9E
SHA1:	879E1DFEA66236589932D32CA08C538273A2C950
SHA-256:	EC3FDABA326668208C4E75E74551D6B61D13A8203CDC34041803342658DB55F5
SHA-512:	3540B7859E93CF4E712DF28C5C07E43D42B0EA3F1C9E144A534094965EFB69C95CDDD86DBD71E65B3B4177C8EBFD2E2CBD6DB8DADAD1BB1593FB5DAEF8C1D891
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFE130414A9DA75E26.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.07131924603253284
Encrypted:	false
SSDEEP:	6:2/9LG7iVCnLG7iVrKOzPLHKOCgMdJJByLMHgVky6lit/:2F0i8n0itFzDHFCg+JJBygit/
MD5:	A5A5C5C0A02B9AB25CFE06B67814FED9
SHA1:	3E4160A0C95BD5E289D4FD20A4B9E20ED755AAFE
SHA-256:	54E5EB7FA254059ACDE6A0BB1DE20A22B1E327FBEF0B53EDC7D9A158F2F9531B
SHA-512:	3DB329805246E561168CE03DC9E6C041BA3798A70808E395649A85A3C9560351801B5A3F01B7555C37AC91FC067F7F3B983E95AEC1B079EA11D2BA5701A0D00B
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFF585C7427396405F.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Semolina, Author: Kwela Eirenicon, Keywords: Installer, Comments: This installer database contains the logic and data required to install Semolina., Template: Intel;1033, Revision Number: {E399BBE4-4063-457E-BB84-F6CBF9E31491}, Create Time/Date: Wed Oct 9 11:42:28 2024, Last Saved Time/Date: Wed Oct 9 11:42:28 2024, Number of Pages: 500, Number of Words: 10, Name of Creating Application: WiX Toolset (4.0.0.0), Security: 2
Entropy (8bit):	7.994851151194348
TrID:	Microsoft Windows Installer (60509/1) 88.31% Generic OLE2 / Multistream Compound File (8008/1) 11.69%
File name:	iieCxV2b1n.msi
File size:	2'990'080 bytes
MD5:	d87cc5fb2d4047d442446cc6d2d01cf9
SHA1:	8d2c76bb8248b1c8171c4cc198255d5613afe6fe
SHA256:	afbdaa974cdc9624fe94b5c0ca6ce01695570790a68cc9c86ea0619973f13d07
SHA512:	542e85c82bb770f8e4c6415597330d541be2a21c1e95f83c9e57db5df123255be831f4beab56f7211dd1b7c3823838ce3526fa16ae81f5d9bf4767ab46217333
SSDEEP:	49152:NiSoOl+YyNuCClJkqr6zeM4I/157fW8KvSu784p0mKZ+nYxgrFUhmnb+t1cVDUqb:Nt7+YJCCvkP4Id59Kvv8KGZgYyyuqtUF
TLSH:	7BD533C076683FE7F20A43370AB2E599D124CD901A82A251B91BF741BBB7B50D7F7624
File Content Preview:	........................>......................................................................................................................................................................................................................................

File Icon


Icon Hash:	2d2e3797b32b2b99

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-18T12:09:40.005424+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:40.117811+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:40.227908+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:40.336552+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:40.446062+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:40.555307+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:40.665740+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:40.774006+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:40.886453+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:40.992788+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:41.102299+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:41.211511+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:41.321737+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:41.430326+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:41.540439+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:41.649304+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:41.758400+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:41.867836+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:42.004819+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:42.117927+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:42.358989+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:42.461446+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:42.571745+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:42.680143+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:42.790030+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:42.898859+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:43.008443+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:43.117616+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:43.227238+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:43.336459+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:43.446356+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:43.555401+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:43.664718+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:43.774765+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:43.883546+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:43.992688+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:44.102542+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:44.211445+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:44.320990+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:44.430551+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:44.539636+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:44.648987+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:44.758936+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:44.867705+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:44.977218+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:45.086599+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:45.195941+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:45.305205+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:45.415115+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:45.524014+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:45.633412+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:45.742795+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:45.852152+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:45.962263+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:46.071848+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:46.180334+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:46.289827+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:46.416095+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:46.523984+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:46.633352+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:46.743294+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:46.852213+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:46.961506+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:47.070847+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:47.180182+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:47.289692+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:47.399614+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:47.508384+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:47.617741+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:47.727193+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:48.055828+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:48.165819+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:48.274106+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:48.383457+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:48.492839+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:48.602296+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60851	91.240.118.154	15647	TCP
2024-10-18T12:09:48.717545+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:48.821312+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:49.149087+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:49.258390+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:49.367797+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:49.480372+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:49.586501+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:49.695913+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:49.805296+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:49.914715+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:50.024011+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:50.134173+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:50.242783+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:50.352084+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:50.461507+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:50.570813+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:50.680254+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:50.790100+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:50.899124+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:51.008271+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:51.118088+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:51.227258+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:51.336435+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:51.446334+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:51.555174+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:51.664586+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:51.773945+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:51.884586+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:51.992678+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:52.102525+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:52.211430+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:52.320839+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:52.430258+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:52.539702+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:52.649030+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:52.758773+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:52.867663+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:52.977218+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:53.086473+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:53.195807+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:53.305193+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:53.414984+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:53.524055+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:53.633324+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:53.742715+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:53.852090+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:53.961582+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:54.071362+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:54.180325+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:54.289489+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:54.398893+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:54.508282+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:54.617688+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:54.728076+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:54.836578+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:54.963307+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:55.162580+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:55.274041+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:55.383320+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:55.493252+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:55.602111+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:55.711707+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:55.821460+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:55.930948+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:56.040045+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:56.149476+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:56.258428+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:56.368142+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:56.477151+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:56.586945+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:56.696030+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:56.805668+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:56.914627+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:57.024137+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:57.133455+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:57.246369+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60897	91.240.118.154	15647	TCP
2024-10-18T12:09:57.357891+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:57.473119+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:57.847733+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:58.023469+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:58.070832+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:58.182032+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:58.289634+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:58.399026+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:58.509574+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:58.617671+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:58.727093+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:58.836520+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:58.945853+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:59.055169+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:59.166040+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:59.273987+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:59.383335+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:59.492969+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:59.602164+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:59.711474+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:59.822658+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:09:59.930311+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:00.039728+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:00.152284+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:00.258355+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:00.367962+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:00.478694+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:00.586514+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:00.695832+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:00.805177+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:00.914568+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:01.023903+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:01.134486+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:01.242727+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:01.352057+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:01.461436+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:01.570868+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:01.680170+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:01.790805+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:01.898980+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:02.386891+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:02.398720+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:02.514274+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:02.617672+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:02.727125+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:02.836482+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:02.946287+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:03.055356+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:03.166067+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:03.274279+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:03.383288+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:03.492849+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:03.602176+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:03.713357+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:03.824721+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:03.930884+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:04.039675+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:04.149207+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:04.258382+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:04.368005+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:04.477871+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:04.586726+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:04.695983+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:04.805760+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:04.914874+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:05.024041+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:05.133877+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:05.242938+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:05.352293+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:05.461579+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60942	91.240.118.154	15647	TCP
2024-10-18T12:10:06.035704+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:06.149193+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:06.258396+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:06.367689+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:06.477069+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:06.587207+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:06.695800+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:06.805548+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:06.914800+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:07.025057+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:07.133480+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:07.461583+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:07.570948+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:07.680344+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:07.789692+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:07.899515+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:08.010765+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:08.117729+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:08.227152+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:08.336739+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:08.446052+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:08.555863+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:08.665777+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:08.774238+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:08.883497+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:08.992821+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:09.102170+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:09.212146+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:09.322587+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:09.430270+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:09.539627+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:09.649810+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:09.758281+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:09.868351+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:09.978567+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:10.086439+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:10.195806+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:10.305323+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:10.414599+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:10.524363+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:10.634481+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:10.742911+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:10.852250+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:10.961510+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:11.070883+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:11.183583+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:11.290367+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:11.399033+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:11.509247+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:11.617951+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:11.727184+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:11.837019+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:11.946716+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:12.055241+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:12.164575+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:12.273946+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:12.383312+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:12.493258+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:12.602957+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:12.711493+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:12.820839+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:12.933969+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:13.039676+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:13.149555+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:13.258713+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:13.367778+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:13.477060+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:13.586438+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:13.695839+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:13.805661+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:13.914791+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:14.023989+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:14.133437+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:14.242972+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:14.352121+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:14.462002+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:14.578254+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60989	91.240.118.154	15647	TCP
2024-10-18T12:10:14.686178+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:14.790585+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:14.899077+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:15.008349+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:15.117669+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:15.227457+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:15.336440+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:15.445923+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:15.555359+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:15.664590+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:15.758470+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:15.852490+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:15.946519+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.039611+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.133453+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.227115+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.326188+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.430910+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.524003+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.617781+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.711431+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.805357+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.899041+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:16.993121+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:17.086467+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:17.180215+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:17.273916+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:17.367665+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:17.461546+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:17.555895+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:17.649055+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:17.742697+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:17.836556+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:17.930205+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.024041+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.118117+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.211513+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.305173+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.399717+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.492806+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.586571+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.680521+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.774018+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.867890+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:18.961538+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.055531+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.149159+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.243274+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.336775+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.430321+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.524059+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.617846+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.711439+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.806080+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.899010+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:19.992666+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:20.086536+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:20.180376+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:20.273983+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:20.368043+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:20.461871+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:20.555343+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:20.648897+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:20.742722+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:20.836590+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:20.930714+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.008781+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.086551+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.164759+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.242786+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.323875+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.415200+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.492922+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.571025+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.648973+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.727148+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.807343+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.885539+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:21.961530+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.039768+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.117698+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.196016+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.273977+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.352602+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.430315+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.508685+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.586646+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.664616+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.742766+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.821333+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.899064+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:22.977425+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:23.055603+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:23.133482+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:23.213058+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60996	91.240.118.154	15647	TCP
2024-10-18T12:10:23.295100+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:23.368119+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:23.446110+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:23.527137+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:23.603116+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:23.680260+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:23.758317+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:23.838490+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:23.914666+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:23.992778+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.070822+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.148920+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.227257+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.306394+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.383276+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.461367+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.539603+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.617945+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.695920+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.775486+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.852017+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:24.930301+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.008669+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.086580+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.164773+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.244343+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.320915+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.399008+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.477062+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.555435+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.634025+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.713177+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.789674+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.867845+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:25.949378+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.024083+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.086835+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.166079+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.242947+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.328351+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.399112+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.461858+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.524361+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.588155+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.667433+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.742801+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.805418+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.867850+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.930267+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:26.994472+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:27.055487+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:27.124584+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:27.195847+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:27.258509+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:27.660315+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:27.674852+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:27.834859+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:27.922046+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:27.992924+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.055347+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.117815+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.180363+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.242708+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.306390+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.367801+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.430199+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.492843+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.555346+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.618013+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.681407+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.742687+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.805243+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.867754+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.930335+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:28.992711+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.056517+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.120380+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.180303+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.242785+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.305364+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.367765+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.431421+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.492812+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.555178+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.617662+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.680228+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.742807+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.806408+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.867669+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.930258+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:29.992730+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.055357+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.117839+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.181877+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.242801+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.326164+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.383332+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.447691+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.508740+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.584131+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.648950+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.711513+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.774002+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.836901+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.899133+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:30.962806+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.024082+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.086431+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.149228+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.211480+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.274006+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.338583+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.398954+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.461395+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.524946+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.586596+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.648934+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.712870+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.773941+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60997	91.240.118.154	15647	TCP
2024-10-18T12:10:31.841993+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:31.898940+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:32.963416+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.009411+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.055745+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.102583+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.149149+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.195897+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.243418+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.289630+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.336546+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.383323+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.430196+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.477089+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.524518+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.571074+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.618133+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.664710+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.711515+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.758389+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.805985+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:33.852321+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.195910+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.242860+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.289707+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.336777+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.383392+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.431065+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.477240+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.523953+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.570881+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.620224+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.664827+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.712366+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.758696+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.805396+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.852224+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.898967+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.945871+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:34.993292+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.039703+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.086467+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.133653+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.180189+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.227164+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.274681+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.320869+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.367841+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.414791+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.461606+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.508343+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.555850+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.602183+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.649071+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.695881+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.742735+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.789764+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.836995+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.883477+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.930345+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:35.977228+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.024043+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.070906+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.118674+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.164785+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.211581+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.258417+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.305399+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.352079+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.399732+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.445907+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.492887+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.539713+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.586603+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.633425+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.680914+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.727223+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.774228+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.821105+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.867765+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.914762+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:36.961995+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.008478+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.055269+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.102139+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.149104+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.196053+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.243249+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.289572+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.336522+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.383455+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.430424+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.477094+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.509128+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.555193+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.586443+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.617751+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.649036+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.695907+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.743435+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.789678+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.836564+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.867973+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.899187+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.930671+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.962121+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:37.992822+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.023966+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.055212+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.086969+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.117806+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.149658+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.180344+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.211527+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.242756+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.273991+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.305347+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.336998+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.367678+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.398973+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.430382+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.461738+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.493038+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.524852+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.557716+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.586538+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.617796+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.649134+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:38.680258+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.141593+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.236520+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.282118+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.321720+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.362463+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.401190+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.451190+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.503232+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.539809+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.570980+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.602110+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.633407+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.665135+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.696775+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.727023+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.764439+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.789914+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.822270+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.853004+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:39.884392+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	60999	91.240.118.154	15647	TCP
2024-10-18T12:10:40.451828+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.477658+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.508463+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.539703+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.645341+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.665081+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.695870+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.727172+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.758411+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.789566+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.821263+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.852786+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.883770+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.938411+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.966719+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:40.977277+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.008372+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.040271+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.071056+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.102224+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.133463+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.164709+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.220783+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.250888+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.258493+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.289832+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.323641+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.354104+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.459806+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.482117+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.508571+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.540063+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.570898+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.613754+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.649266+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.680424+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.711600+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.742813+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.798246+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.837923+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:41.866214+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:42.992812+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.024028+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.055785+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.086433+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.117672+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.149049+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.180305+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.211664+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.243126+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.274045+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.305280+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.337036+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.367836+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.399082+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.430859+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.461461+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.492715+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.524041+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.555251+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.586725+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.618206+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.649023+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.680279+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.711470+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.742696+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.773939+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.805851+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.836507+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.867832+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.899469+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.932399+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.961486+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:43.993224+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.023973+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.055435+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.086573+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.117726+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.149080+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.180678+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.211441+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.242931+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.274048+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.305427+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.336621+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.368167+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.399117+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.436027+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.472210+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.495057+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.524235+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.548666+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.570988+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.587250+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.617888+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.633362+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.649104+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.665310+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.695831+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.711394+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.727085+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.742977+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.758391+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:44.775012+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61000	91.240.118.154	15647	TCP
2024-10-18T12:10:49.076368+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.086646+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.102095+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.117688+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.133732+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.148969+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.164636+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.180232+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.195836+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.211375+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.227509+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.242698+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.258539+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.273960+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.289657+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.305162+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.321306+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.336403+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.352019+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.367764+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.383270+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.400524+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.415125+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.430212+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.445820+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.461620+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.477103+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.492835+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.508640+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.523997+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.539594+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.555116+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.570816+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.586421+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.602584+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.617637+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.633245+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.648898+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.664542+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.680212+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.696409+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.711419+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.727047+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.742646+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.758311+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.774061+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.789911+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.805319+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.820771+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.838708+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.866588+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.899065+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.914617+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.936541+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.955578+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.961784+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:49.977384+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61001	91.240.118.154	15647	TCP
2024-10-18T12:10:50.146116+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.164733+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.190739+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.203991+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.212667+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.227326+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.243014+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.259310+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.277505+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.295334+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.305798+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.320864+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.336746+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.352101+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.368096+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.384013+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.399110+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.414630+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.430363+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.445811+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.463089+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.477404+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.492658+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.510929+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.604261+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.617687+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.633256+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.649165+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.664902+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.680255+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.695822+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.711400+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.727110+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.742987+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.758829+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.773956+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.790509+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.805492+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.820799+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.836866+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.852822+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.867781+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.883447+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:50.908857+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:51.024573+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:51.039977+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:51.055162+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:51.070851+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:51.086421+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61002	91.240.118.154	15647	TCP
2024-10-18T12:10:54.543250+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.555985+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.571218+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.586586+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.602047+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.617706+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.633342+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.649001+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.664996+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.680152+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.696065+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.711402+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.727893+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.742661+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.758677+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.773914+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.789772+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.805247+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.822487+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.836429+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.852597+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.867669+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.883508+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.898943+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.915574+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.930379+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.946346+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.961517+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.977286+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:54.992702+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.009133+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.023915+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.041186+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.055246+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.070844+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.086439+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.102029+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.117655+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.134582+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.163831+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.214993+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.227581+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.242786+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.258567+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.274536+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.289694+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.306060+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.321271+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.336389+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.352103+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.368064+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.385153+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.399903+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.415238+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.430520+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.445850+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.461662+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.477041+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.493599+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.509003+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.523958+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.549403+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.639956+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.648905+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.664504+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.733880+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.742872+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.758440+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.773940+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.790264+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.805228+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.820893+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.837376+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.855009+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.868526+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.884762+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.899981+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.916008+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.933432+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:55.959529+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.106940+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.119208+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.133282+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.158575+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.199191+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.214864+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.228005+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.244499+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.261492+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.279478+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.294563+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.305540+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.323698+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.342565+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.391975+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.404738+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.424515+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.431732+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.446837+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.464525+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.479453+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.495131+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.508802+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:10:56.524235+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61003	91.240.118.154	15647	TCP
2024-10-18T12:11:03.051239+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61005	91.240.118.154	15647	TCP
2024-10-18T12:11:03.122890+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61005	91.240.118.154	15647	TCP
2024-10-18T12:11:03.377525+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61005	91.240.118.154	15647	TCP
2024-10-18T12:11:03.490615+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61005	91.240.118.154	15647	TCP
2024-10-18T12:11:03.674154+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61005	91.240.118.154	15647	TCP
2024-10-18T12:11:04.118293+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61005	91.240.118.154	15647	TCP
2024-10-18T12:11:11.603871+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61006	91.240.118.154	15647	TCP
2024-10-18T12:11:11.907622+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61006	91.240.118.154	15647	TCP
2024-10-18T12:11:11.944144+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61006	91.240.118.154	15647	TCP
2024-10-18T12:11:12.669389+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61006	91.240.118.154	15647	TCP
2024-10-18T12:11:14.889458+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61006	91.240.118.154	15647	TCP
2024-10-18T12:11:15.173499+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61006	91.240.118.154	15647	TCP
2024-10-18T12:11:20.094013+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61007	91.240.118.154	15647	TCP
2024-10-18T12:11:20.109646+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61007	91.240.118.154	15647	TCP
2024-10-18T12:11:20.119637+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61007	91.240.118.154	15647	TCP
2024-10-18T12:11:20.159430+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61007	91.240.118.154	15647	TCP
2024-10-18T12:11:20.408909+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61007	91.240.118.154	15647	TCP
2024-10-18T12:11:20.419111+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61007	91.240.118.154	15647	TCP
2024-10-18T12:11:20.510241+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61007	91.240.118.154	15647	TCP
2024-10-18T12:11:20.546571+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61007	91.240.118.154	15647	TCP
2024-10-18T12:11:28.607467+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61008	91.240.118.154	15647	TCP
2024-10-18T12:11:28.747536+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61008	91.240.118.154	15647	TCP
2024-10-18T12:11:28.876481+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61008	91.240.118.154	15647	TCP
2024-10-18T12:11:28.998280+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61008	91.240.118.154	15647	TCP
2024-10-18T12:11:37.096972+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.6	61010	91.240.118.154	15647	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 18, 2024 12:09:04.430107117 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 18, 2024 12:09:04.555049896 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 18, 2024 12:09:04.648821115 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 18, 2024 12:09:13.976484060 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:13.976521015 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:13.976608992 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:13.976948977 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:13.976964951 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:14.039412022 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 18, 2024 12:09:14.164371014 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 18, 2024 12:09:14.258105040 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 18, 2024 12:09:14.728684902 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:14.728794098 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:14.731251955 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:14.731264114 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:14.731554985 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:14.741818905 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:14.783400059 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:14.990112066 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:14.990138054 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:14.990154028 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:14.990195990 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:14.990219116 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:14.990246058 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:14.990262032 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:15.110522985 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.110543013 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.110599041 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:15.110610008 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.110652924 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:15.110737085 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:15.230978966 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.230998039 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.231064081 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:15.231076956 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.233084917 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:15.351416111 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.351440907 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.351543903 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:15.351566076 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.352010965 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:15.471282005 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.471302986 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.471395969 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:15.471417904 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.472400904 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:15.591022968 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.591053009 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.591187954 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:15.591211081 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.591260910 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:15.711242914 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.711262941 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.711355925 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:15.711378098 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.711443901 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:15.831300020 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.831329107 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.831381083 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:15.831413984 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.831435919 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:15.831460953 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:15.874283075 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.874304056 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.874352932 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:15.874376059 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.874403954 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:15.874418974 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:15.993997097 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.994020939 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.994092941 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:15.994115114 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:15.994153023 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.016513109 CEST	443	60709	173.222.162.64	192.168.2.6
Oct 18, 2024 12:09:16.016673088 CEST	60709	443	192.168.2.6	173.222.162.64
Oct 18, 2024 12:09:16.072547913 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.072568893 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.072680950 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.072699070 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.072746038 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.191771984 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.191791058 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.191893101 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.191906929 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.191947937 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.234514952 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.234534979 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.234616041 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.234625101 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.234663963 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.311826944 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.311891079 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.311901093 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.311918020 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.311938047 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.311969995 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.311985970 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.312001944 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.312001944 CEST	60716	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.312011003 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.312020063 CEST	443	60716	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.388654947 CEST	60717	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.388694048 CEST	443	60717	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.388753891 CEST	60717	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.390453100 CEST	60718	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.390460014 CEST	443	60718	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.390507936 CEST	60718	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.390691042 CEST	60717	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.390697956 CEST	443	60717	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.391832113 CEST	60718	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.391844034 CEST	443	60718	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.391953945 CEST	60719	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.391988039 CEST	443	60719	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.392033100 CEST	60719	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.392189980 CEST	60719	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.392205000 CEST	443	60719	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.392858028 CEST	60720	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.392899036 CEST	443	60720	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.392960072 CEST	60720	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.393305063 CEST	60721	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.393347979 CEST	443	60721	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.393352985 CEST	60720	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.393372059 CEST	443	60720	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:16.393414021 CEST	60721	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.393515110 CEST	60721	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:16.393527031 CEST	443	60721	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.115367889 CEST	443	60719	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.116112947 CEST	60719	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.116142988 CEST	443	60719	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.116807938 CEST	60719	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.116813898 CEST	443	60719	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.118189096 CEST	443	60717	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.118514061 CEST	60717	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.118525982 CEST	443	60717	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.118925095 CEST	60717	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.118928909 CEST	443	60717	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.132747889 CEST	443	60718	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.133085012 CEST	60718	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.133093119 CEST	443	60718	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.133523941 CEST	60718	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.133527994 CEST	443	60718	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.138293982 CEST	443	60721	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.138675928 CEST	60721	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.138689041 CEST	443	60721	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.139137983 CEST	60721	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.139142036 CEST	443	60721	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.141585112 CEST	443	60720	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.141910076 CEST	60720	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.141952991 CEST	443	60720	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.142301083 CEST	60720	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.142307043 CEST	443	60720	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.244450092 CEST	443	60719	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.244517088 CEST	443	60719	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.244585037 CEST	60719	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.244604111 CEST	443	60719	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.244642019 CEST	60719	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.244652987 CEST	443	60719	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.244695902 CEST	60719	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.244816065 CEST	60719	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.244837046 CEST	443	60719	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.244851112 CEST	60719	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.244859934 CEST	443	60719	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.246941090 CEST	443	60717	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.246963024 CEST	443	60717	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.247026920 CEST	60717	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.247035027 CEST	443	60717	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.247066975 CEST	60717	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.247077942 CEST	443	60717	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.247119904 CEST	443	60717	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.247153997 CEST	60717	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.247183084 CEST	60717	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.247195005 CEST	443	60717	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.247205973 CEST	60717	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.247216940 CEST	443	60717	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.247926950 CEST	60722	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.247973919 CEST	443	60722	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.248054028 CEST	60722	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.248284101 CEST	60722	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.248294115 CEST	443	60722	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.249322891 CEST	60723	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.249368906 CEST	443	60723	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.249437094 CEST	60723	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.249572039 CEST	60723	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.249586105 CEST	443	60723	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.263432026 CEST	443	60718	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.263498068 CEST	443	60718	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.263537884 CEST	60718	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.263631105 CEST	60718	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.263638973 CEST	443	60718	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.263649940 CEST	60718	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.263654947 CEST	443	60718	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.265678883 CEST	60724	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.265806913 CEST	443	60724	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.265887976 CEST	60724	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.266035080 CEST	60724	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.266097069 CEST	443	60724	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.269022942 CEST	443	60721	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.269196987 CEST	443	60721	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.269238949 CEST	60721	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.269268990 CEST	60721	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.269279003 CEST	443	60721	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.269289970 CEST	60721	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.269294024 CEST	443	60721	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.271040916 CEST	60725	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.271061897 CEST	443	60725	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.271133900 CEST	60725	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.271249056 CEST	60725	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.271256924 CEST	443	60725	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.273921013 CEST	443	60720	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.273937941 CEST	443	60720	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.273984909 CEST	60720	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.273996115 CEST	443	60720	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.274094105 CEST	443	60720	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.274131060 CEST	60720	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.274143934 CEST	443	60720	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.274157047 CEST	60720	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.274162054 CEST	443	60720	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.274171114 CEST	60720	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.274173975 CEST	443	60720	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.276091099 CEST	60726	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.276102066 CEST	443	60726	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.276164055 CEST	60726	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.276282072 CEST	60726	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.276288986 CEST	443	60726	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.977314949 CEST	443	60722	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.978024006 CEST	60722	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.978053093 CEST	443	60722	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:17.978893995 CEST	60722	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:17.978899956 CEST	443	60722	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.010840893 CEST	443	60725	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.011368036 CEST	60725	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.011410952 CEST	443	60725	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.011811018 CEST	60725	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.011816978 CEST	443	60725	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.021543980 CEST	443	60723	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.022037983 CEST	60723	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.022068024 CEST	443	60723	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.022428989 CEST	60723	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.022434950 CEST	443	60723	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.025572062 CEST	443	60726	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.025652885 CEST	443	60724	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.034291029 CEST	60726	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.034313917 CEST	443	60726	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.034693003 CEST	60726	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.034699917 CEST	443	60726	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.034935951 CEST	60724	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.034966946 CEST	443	60724	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.035264969 CEST	60724	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.035271883 CEST	443	60724	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.106443882 CEST	443	60722	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.106615067 CEST	443	60722	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.106676102 CEST	60722	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.106749058 CEST	60722	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.106776953 CEST	443	60722	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.106792927 CEST	60722	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.106801033 CEST	443	60722	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.109610081 CEST	60727	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.109668970 CEST	443	60727	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.109735966 CEST	60727	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.109868050 CEST	60727	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.109884024 CEST	443	60727	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.140500069 CEST	443	60725	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.140974045 CEST	443	60725	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.141055107 CEST	60725	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.154329062 CEST	60725	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.154354095 CEST	443	60725	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.154367924 CEST	60725	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.154376030 CEST	443	60725	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.154850960 CEST	443	60723	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.155002117 CEST	443	60723	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.155060053 CEST	60723	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.157521963 CEST	60723	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.157548904 CEST	443	60723	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.157560110 CEST	60723	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.157566071 CEST	443	60723	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.160063028 CEST	60728	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.160103083 CEST	443	60728	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.160182953 CEST	60728	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.160497904 CEST	60728	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.160509109 CEST	443	60728	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.161006927 CEST	60729	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.161046982 CEST	443	60729	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.161099911 CEST	60729	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.161202908 CEST	60729	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.161217928 CEST	443	60729	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.162856102 CEST	443	60726	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.163052082 CEST	443	60726	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.163109064 CEST	60726	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.163249969 CEST	443	60724	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.163706064 CEST	443	60724	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.163760900 CEST	60724	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.177455902 CEST	60726	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.177495003 CEST	443	60726	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.177510023 CEST	60726	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.177519083 CEST	443	60726	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.179811001 CEST	60730	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.179852009 CEST	443	60730	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.179924965 CEST	60730	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.180319071 CEST	60724	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.180319071 CEST	60724	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.180380106 CEST	443	60724	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.180409908 CEST	443	60724	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.183619022 CEST	60730	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.183635950 CEST	443	60730	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.184969902 CEST	60731	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.184993982 CEST	443	60731	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.185064077 CEST	60731	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.185241938 CEST	60731	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.185252905 CEST	443	60731	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.859745026 CEST	443	60727	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.860354900 CEST	60727	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.860428095 CEST	443	60727	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.860841990 CEST	60727	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.860861063 CEST	443	60727	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.899930954 CEST	443	60729	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.900579929 CEST	60729	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.900597095 CEST	443	60729	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.901376963 CEST	60729	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.901381969 CEST	443	60729	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.905033112 CEST	443	60728	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.905570984 CEST	60728	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.905585051 CEST	443	60728	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.906017065 CEST	60728	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.906022072 CEST	443	60728	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.918211937 CEST	443	60730	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.918709040 CEST	60730	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.918720961 CEST	443	60730	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.919375896 CEST	60730	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.919398069 CEST	443	60730	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.927578926 CEST	443	60731	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.927905083 CEST	60731	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.927917004 CEST	443	60731	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.928340912 CEST	60731	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.928345919 CEST	443	60731	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.992126942 CEST	443	60727	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.992224932 CEST	443	60727	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.992279053 CEST	60727	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.992412090 CEST	60727	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.992439032 CEST	443	60727	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.992450953 CEST	60727	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.992456913 CEST	443	60727	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.995178938 CEST	60732	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.995234013 CEST	443	60732	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:18.995304108 CEST	60732	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.995446920 CEST	60732	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:18.995459080 CEST	443	60732	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.031658888 CEST	443	60729	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.031902075 CEST	443	60729	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.031972885 CEST	60729	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.032015085 CEST	60729	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.032032967 CEST	443	60729	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.032044888 CEST	60729	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.032049894 CEST	443	60729	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.034280062 CEST	443	60728	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.034431934 CEST	443	60728	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.034491062 CEST	60728	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.034527063 CEST	60728	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.034527063 CEST	60728	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.034547091 CEST	443	60728	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.034559965 CEST	443	60728	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.034789085 CEST	60733	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.034841061 CEST	443	60733	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.034914017 CEST	60733	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.035060883 CEST	60733	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.035073042 CEST	443	60733	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.036547899 CEST	60734	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.036557913 CEST	443	60734	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.036623001 CEST	60734	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.036775112 CEST	60734	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.036787987 CEST	443	60734	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.047317028 CEST	443	60730	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.047501087 CEST	443	60730	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.047564983 CEST	60730	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.047621965 CEST	60730	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.047635078 CEST	443	60730	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.047646999 CEST	60730	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.047652006 CEST	443	60730	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.049962997 CEST	60735	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.050005913 CEST	443	60735	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.050067902 CEST	60735	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.050183058 CEST	60735	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.050193071 CEST	443	60735	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.058345079 CEST	443	60731	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.058410883 CEST	443	60731	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.058466911 CEST	60731	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.058602095 CEST	60731	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.058619976 CEST	443	60731	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.058630943 CEST	60731	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.058635950 CEST	443	60731	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.060926914 CEST	60736	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.060947895 CEST	443	60736	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.061003923 CEST	60736	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.061122894 CEST	60736	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.061131954 CEST	443	60736	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.718841076 CEST	443	60732	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.719314098 CEST	60732	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.719331026 CEST	443	60732	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.719799042 CEST	60732	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.719803095 CEST	443	60732	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.773550034 CEST	443	60733	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.774120092 CEST	60733	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.774142981 CEST	443	60733	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.774643898 CEST	60733	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.774650097 CEST	443	60733	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.780144930 CEST	443	60735	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.780431032 CEST	60735	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.780441999 CEST	443	60735	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.780797958 CEST	60735	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.780802011 CEST	443	60735	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.787235022 CEST	443	60734	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.787525892 CEST	60734	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.787570953 CEST	443	60734	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.787897110 CEST	60734	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.787913084 CEST	443	60734	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.807415962 CEST	443	60736	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.807770014 CEST	60736	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.807795048 CEST	443	60736	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.808180094 CEST	60736	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.808185101 CEST	443	60736	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.846976995 CEST	443	60732	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.847189903 CEST	443	60732	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.847259998 CEST	60732	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.847388029 CEST	60732	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.847405910 CEST	443	60732	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.847419977 CEST	60732	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.847424984 CEST	443	60732	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.850229025 CEST	60738	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.850269079 CEST	443	60738	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.850354910 CEST	60738	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.850579977 CEST	60738	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.850593090 CEST	443	60738	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.902637005 CEST	443	60733	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.902869940 CEST	443	60733	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.902940035 CEST	60733	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.902992010 CEST	60733	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.903029919 CEST	443	60733	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.903055906 CEST	60733	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.903072119 CEST	443	60733	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.906275034 CEST	60739	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.906312943 CEST	443	60739	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.906384945 CEST	60739	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.906599998 CEST	60739	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.906610966 CEST	443	60739	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.912142992 CEST	443	60735	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.912218094 CEST	443	60735	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.912262917 CEST	60735	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.912344933 CEST	60735	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.912360907 CEST	443	60735	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.912379980 CEST	60735	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.912384987 CEST	443	60735	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.915558100 CEST	60740	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.915575027 CEST	443	60740	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.915632963 CEST	60740	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.915779114 CEST	60740	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.915790081 CEST	443	60740	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.919230938 CEST	443	60734	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.919368029 CEST	443	60734	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.919426918 CEST	60734	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.919471025 CEST	60734	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.919471025 CEST	60734	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.919492006 CEST	443	60734	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.919513941 CEST	443	60734	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.921416998 CEST	60741	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.921466112 CEST	443	60741	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.921530962 CEST	60741	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.921665907 CEST	60741	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.921689987 CEST	443	60741	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.943346977 CEST	443	60736	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.947015047 CEST	443	60736	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.947062969 CEST	60736	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.947104931 CEST	60736	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.947117090 CEST	443	60736	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.947130919 CEST	60736	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.947135925 CEST	443	60736	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.949368954 CEST	60742	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.949438095 CEST	443	60742	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:19.949527979 CEST	60742	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.949670076 CEST	60742	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:19.949716091 CEST	443	60742	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.584700108 CEST	443	60738	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.585222006 CEST	60738	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.585243940 CEST	443	60738	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.585685015 CEST	60738	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.585690022 CEST	443	60738	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.657387018 CEST	443	60739	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.657449007 CEST	443	60741	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.657967091 CEST	60739	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.657973051 CEST	60741	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.657983065 CEST	443	60739	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.658026934 CEST	443	60741	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.658438921 CEST	60741	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.658447981 CEST	443	60741	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.658493042 CEST	60739	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.658499002 CEST	443	60739	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.671942949 CEST	443	60740	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.672319889 CEST	60740	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.672333002 CEST	443	60740	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.672749043 CEST	60740	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.672754049 CEST	443	60740	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.680197001 CEST	443	60742	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.680735111 CEST	60742	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.680778027 CEST	443	60742	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.681030035 CEST	60742	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.681039095 CEST	443	60742	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.714968920 CEST	443	60738	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.715148926 CEST	443	60738	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.715209007 CEST	60738	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.715306044 CEST	60738	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.715325117 CEST	443	60738	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.715336084 CEST	60738	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.715342045 CEST	443	60738	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.717892885 CEST	60743	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.717927933 CEST	443	60743	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.718005896 CEST	60743	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.718153000 CEST	60743	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.718163013 CEST	443	60743	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.786803007 CEST	443	60741	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.786984921 CEST	443	60741	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.787061930 CEST	60741	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.787164927 CEST	60741	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.787164927 CEST	60741	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.787214994 CEST	443	60741	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.787242889 CEST	443	60741	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.788322926 CEST	443	60739	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.788470030 CEST	443	60739	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.788517952 CEST	60739	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.788582087 CEST	60739	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.788598061 CEST	443	60739	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.788608074 CEST	60739	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.788614035 CEST	443	60739	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.790379047 CEST	60744	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.790441990 CEST	443	60744	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.790518045 CEST	60744	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.790565014 CEST	60745	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.790656090 CEST	443	60745	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.790661097 CEST	60744	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.790695906 CEST	443	60744	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.790734053 CEST	60745	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.790813923 CEST	60745	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.790832996 CEST	443	60745	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.804176092 CEST	443	60740	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.804265976 CEST	443	60740	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.804387093 CEST	60740	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.804548979 CEST	60740	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.804567099 CEST	443	60740	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.804579020 CEST	60740	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.804584026 CEST	443	60740	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.806726933 CEST	60746	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.806828022 CEST	443	60746	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.806911945 CEST	60746	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.807073116 CEST	60746	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.807099104 CEST	443	60746	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.812705994 CEST	443	60742	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.812988997 CEST	443	60742	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.813056946 CEST	60742	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.813148975 CEST	60742	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.813148975 CEST	60742	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.813201904 CEST	443	60742	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.813232899 CEST	443	60742	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.815047026 CEST	60747	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.815109968 CEST	443	60747	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:20.815197945 CEST	60747	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.815336943 CEST	60747	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:20.815356970 CEST	443	60747	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.455457926 CEST	443	60743	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.456011057 CEST	60743	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.456029892 CEST	443	60743	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.456481934 CEST	60743	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.456487894 CEST	443	60743	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.524080992 CEST	443	60744	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.524657011 CEST	60744	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.524687052 CEST	443	60744	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.525021076 CEST	60744	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.525029898 CEST	443	60744	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.539994001 CEST	443	60745	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.541661978 CEST	60745	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.541677952 CEST	443	60745	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.542227983 CEST	60745	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.542234898 CEST	443	60745	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.543236017 CEST	443	60746	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.551732063 CEST	60746	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.551744938 CEST	443	60746	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.552185059 CEST	60746	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.552189112 CEST	443	60746	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.561285019 CEST	443	60747	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.561788082 CEST	60747	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.561820030 CEST	443	60747	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.562429905 CEST	60747	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.562439919 CEST	443	60747	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.585490942 CEST	443	60743	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.585603952 CEST	443	60743	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.585705042 CEST	60743	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.585846901 CEST	60743	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.585874081 CEST	443	60743	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.585884094 CEST	60743	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.585889101 CEST	443	60743	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.589487076 CEST	60750	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.589535952 CEST	443	60750	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.589612007 CEST	60750	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.589989901 CEST	60750	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.590001106 CEST	443	60750	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.653379917 CEST	443	60744	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.653717041 CEST	443	60744	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.653779984 CEST	60744	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.653836966 CEST	60744	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.653856039 CEST	443	60744	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.653933048 CEST	60744	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.653939962 CEST	443	60744	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.656709909 CEST	60751	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.656754017 CEST	443	60751	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.656825066 CEST	60751	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.657000065 CEST	60751	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.657011986 CEST	443	60751	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.671704054 CEST	443	60745	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.671775103 CEST	443	60745	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.671822071 CEST	60745	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.671919107 CEST	60745	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.671931982 CEST	443	60745	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.671941996 CEST	60745	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.671947002 CEST	443	60745	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.674458981 CEST	60752	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.674504042 CEST	443	60752	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.674563885 CEST	60752	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.674737930 CEST	60752	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.674755096 CEST	443	60752	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.677661896 CEST	443	60746	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.677742958 CEST	443	60746	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.677783966 CEST	60746	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.677937031 CEST	60746	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.677943945 CEST	443	60746	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.677962065 CEST	60746	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.677966118 CEST	443	60746	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.680274963 CEST	60753	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.680305004 CEST	443	60753	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.680358887 CEST	60753	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.681608915 CEST	60753	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.681617975 CEST	443	60753	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.692709923 CEST	443	60747	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.692786932 CEST	443	60747	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.692836046 CEST	60747	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.692939997 CEST	60747	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.692959070 CEST	443	60747	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.692972898 CEST	60747	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.692977905 CEST	443	60747	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.694740057 CEST	60754	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.694750071 CEST	443	60754	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:21.694808006 CEST	60754	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.694920063 CEST	60754	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:21.694926023 CEST	443	60754	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.334836960 CEST	443	60750	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.335647106 CEST	60750	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.335669041 CEST	443	60750	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.335756063 CEST	60750	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.335761070 CEST	443	60750	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.381850958 CEST	443	60751	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.382477045 CEST	60751	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.382508039 CEST	443	60751	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.383064032 CEST	60751	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.383070946 CEST	443	60751	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.411495924 CEST	443	60752	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.412205935 CEST	60752	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.412251949 CEST	443	60752	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.412801027 CEST	60752	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.412811041 CEST	443	60752	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.431164026 CEST	443	60754	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.431659937 CEST	60754	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.431684971 CEST	443	60754	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.432261944 CEST	60754	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.432265997 CEST	443	60754	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.432851076 CEST	443	60753	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.433141947 CEST	60753	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.433151960 CEST	443	60753	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.433685064 CEST	60753	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.433689117 CEST	443	60753	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.466936111 CEST	443	60750	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.466990948 CEST	443	60750	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.467041969 CEST	60750	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.467284918 CEST	60750	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.467300892 CEST	443	60750	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.467314005 CEST	60750	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.467319965 CEST	443	60750	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.470341921 CEST	60755	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.470395088 CEST	443	60755	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.470485926 CEST	60755	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.470635891 CEST	60755	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.470650911 CEST	443	60755	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.518121958 CEST	443	60751	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.518196106 CEST	443	60751	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.518245935 CEST	60751	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.518444061 CEST	60751	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.518462896 CEST	443	60751	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.518476963 CEST	60751	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.518481970 CEST	443	60751	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.521084070 CEST	60756	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.521110058 CEST	443	60756	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.521188021 CEST	60756	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.521322012 CEST	60756	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.521330118 CEST	443	60756	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.540513039 CEST	443	60752	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.540601969 CEST	443	60752	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.540678978 CEST	60752	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.540864944 CEST	60752	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.540885925 CEST	443	60752	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.540901899 CEST	60752	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.540910006 CEST	443	60752	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.544105053 CEST	60757	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.544147968 CEST	443	60757	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.544280052 CEST	60757	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.544521093 CEST	60757	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.544528961 CEST	443	60757	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.563683033 CEST	443	60754	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.563762903 CEST	443	60754	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.563834906 CEST	60754	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.564044952 CEST	60754	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.564062119 CEST	443	60754	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.564074039 CEST	60754	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.564080000 CEST	443	60754	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.564380884 CEST	443	60753	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.564858913 CEST	443	60753	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.564919949 CEST	60753	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.565035105 CEST	60753	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.565040112 CEST	443	60753	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.565072060 CEST	60753	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.565074921 CEST	443	60753	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.567208052 CEST	60758	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.567241907 CEST	443	60758	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.567413092 CEST	60759	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.567420959 CEST	60758	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.567442894 CEST	443	60759	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.567486048 CEST	60758	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.567502022 CEST	443	60758	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:22.567514896 CEST	60759	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.567689896 CEST	60759	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:22.567701101 CEST	443	60759	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.219696999 CEST	443	60755	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.220575094 CEST	60755	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.220616102 CEST	443	60755	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.221199989 CEST	60755	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.221209049 CEST	443	60755	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.250364065 CEST	443	60756	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.250916004 CEST	60756	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.250941992 CEST	443	60756	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.251530886 CEST	60756	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.251538038 CEST	443	60756	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.293450117 CEST	443	60757	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.293989897 CEST	60757	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.294006109 CEST	443	60757	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.294606924 CEST	443	60758	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.294627905 CEST	60757	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.294645071 CEST	443	60757	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.295111895 CEST	60758	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.295120001 CEST	443	60758	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.295207024 CEST	60758	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.295212030 CEST	443	60758	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.316884995 CEST	443	60759	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.317317009 CEST	60759	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.317349911 CEST	443	60759	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.317651033 CEST	60759	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.317658901 CEST	443	60759	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.351919889 CEST	443	60755	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.352058887 CEST	443	60755	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.352238894 CEST	60755	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.352408886 CEST	60755	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.352435112 CEST	443	60755	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.352449894 CEST	60755	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.352457047 CEST	443	60755	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.355185032 CEST	60760	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.355222940 CEST	443	60760	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.355308056 CEST	60760	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.355468988 CEST	60760	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.355478048 CEST	443	60760	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.379818916 CEST	443	60756	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.380072117 CEST	443	60756	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.380131960 CEST	60756	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.380172968 CEST	60756	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.380172968 CEST	60756	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.380192995 CEST	443	60756	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.380203962 CEST	443	60756	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.382384062 CEST	60761	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.382435083 CEST	443	60761	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.382518053 CEST	60761	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.382636070 CEST	60761	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.382652044 CEST	443	60761	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.425795078 CEST	443	60757	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.425957918 CEST	443	60757	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.426060915 CEST	60757	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.426224947 CEST	60757	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.426224947 CEST	60757	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.426244974 CEST	443	60757	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.426259995 CEST	443	60757	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.428502083 CEST	60762	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.428559065 CEST	443	60762	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.428630114 CEST	60762	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.428793907 CEST	60762	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.428813934 CEST	443	60762	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.431266069 CEST	443	60758	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.431365967 CEST	443	60758	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.431478977 CEST	60758	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.431478977 CEST	60758	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.431478977 CEST	60758	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.433376074 CEST	60763	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.433402061 CEST	443	60763	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.433469057 CEST	60763	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.433578968 CEST	60763	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.433585882 CEST	443	60763	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.449158907 CEST	443	60759	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.449218035 CEST	443	60759	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.449357986 CEST	60759	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.449402094 CEST	60759	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.449402094 CEST	60759	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.449419975 CEST	443	60759	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.449431896 CEST	443	60759	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.451376915 CEST	60764	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.451456070 CEST	443	60764	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.451539040 CEST	60764	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.451648951 CEST	60764	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.451673031 CEST	443	60764	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:23.742487907 CEST	60758	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:23.742506981 CEST	443	60758	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.106038094 CEST	443	60760	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.106982946 CEST	60760	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.107013941 CEST	443	60760	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.107466936 CEST	60760	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.107474089 CEST	443	60760	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.121524096 CEST	443	60761	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.122004986 CEST	60761	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.122091055 CEST	443	60761	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.122559071 CEST	60761	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.122575045 CEST	443	60761	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.167232037 CEST	443	60762	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.167737007 CEST	60762	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.167798042 CEST	443	60762	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.168184996 CEST	60762	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.168191910 CEST	443	60762	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.182064056 CEST	443	60763	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.182452917 CEST	60763	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.182465076 CEST	443	60763	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.183065891 CEST	60763	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.183069944 CEST	443	60763	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.201428890 CEST	443	60764	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.201818943 CEST	60764	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.201869011 CEST	443	60764	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.202219009 CEST	60764	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.202245951 CEST	443	60764	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.240416050 CEST	443	60760	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.240504980 CEST	443	60760	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.240557909 CEST	60760	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.240746021 CEST	60760	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.240770102 CEST	443	60760	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.240781069 CEST	60760	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.240787029 CEST	443	60760	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.243674994 CEST	60766	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.243717909 CEST	443	60766	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.243767977 CEST	60766	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.243894100 CEST	60766	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.243906975 CEST	443	60766	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.251219988 CEST	443	60761	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.251353025 CEST	443	60761	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.251398087 CEST	60761	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.251492023 CEST	60761	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.251511097 CEST	443	60761	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.251528978 CEST	60761	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.251535892 CEST	443	60761	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.253631115 CEST	60767	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.253657103 CEST	443	60767	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.253706932 CEST	60767	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.253855944 CEST	60767	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.253865957 CEST	443	60767	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.301934004 CEST	443	60762	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.302018881 CEST	443	60762	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.302078009 CEST	60762	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.302225113 CEST	60762	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.302256107 CEST	443	60762	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.302273989 CEST	60762	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.302282095 CEST	443	60762	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.304903030 CEST	60768	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.304940939 CEST	443	60768	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.305030107 CEST	60768	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.305296898 CEST	60768	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.305305004 CEST	443	60768	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.314538002 CEST	443	60763	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.314610004 CEST	443	60763	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.314680099 CEST	60763	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.314852953 CEST	60763	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.314868927 CEST	443	60763	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.314879894 CEST	60763	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.314886093 CEST	443	60763	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.317327023 CEST	60769	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.317363977 CEST	443	60769	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.317440033 CEST	60769	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.317600965 CEST	60769	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.317617893 CEST	443	60769	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.332863092 CEST	443	60764	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.332956076 CEST	443	60764	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.333029032 CEST	60764	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.333156109 CEST	60764	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.333192110 CEST	443	60764	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.333228111 CEST	60764	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.333244085 CEST	443	60764	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.335442066 CEST	60770	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.335473061 CEST	443	60770	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:24.335546970 CEST	60770	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.335702896 CEST	60770	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:24.335717916 CEST	443	60770	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.001094103 CEST	443	60767	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.001760960 CEST	60767	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.001815081 CEST	443	60767	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.002335072 CEST	60767	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.002368927 CEST	443	60767	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.015760899 CEST	443	60766	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.016278982 CEST	60766	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.016314030 CEST	443	60766	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.016887903 CEST	60766	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.016895056 CEST	443	60766	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.050918102 CEST	443	60768	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.051918983 CEST	60768	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.051918983 CEST	60768	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.051935911 CEST	443	60768	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.051945925 CEST	443	60768	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.066445112 CEST	443	60770	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.066998005 CEST	60770	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.067006111 CEST	443	60770	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.067434072 CEST	60770	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.067439079 CEST	443	60770	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.071995974 CEST	443	60769	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.072556973 CEST	60769	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.072563887 CEST	443	60769	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.073473930 CEST	60769	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.073482037 CEST	443	60769	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.130848885 CEST	443	60767	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.130927086 CEST	443	60767	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.130985022 CEST	60767	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.131192923 CEST	60767	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.131242037 CEST	443	60767	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.131292105 CEST	60767	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.131310940 CEST	443	60767	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.134362936 CEST	60772	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.134404898 CEST	443	60772	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.134495020 CEST	60772	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.135042906 CEST	60772	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.135052919 CEST	443	60772	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.159646034 CEST	443	60766	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.159713030 CEST	443	60766	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.159756899 CEST	60766	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.159966946 CEST	60766	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.159981012 CEST	443	60766	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.159986019 CEST	60766	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.159991026 CEST	443	60766	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.163057089 CEST	60773	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.163108110 CEST	443	60773	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.163300991 CEST	60773	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.163523912 CEST	60773	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.163539886 CEST	443	60773	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.182447910 CEST	443	60768	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.182637930 CEST	443	60768	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.182702065 CEST	60768	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.182764053 CEST	60768	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.182764053 CEST	60768	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.182816029 CEST	443	60768	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.182838917 CEST	443	60768	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.185673952 CEST	60774	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.185689926 CEST	443	60774	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.185746908 CEST	60774	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.185889006 CEST	60774	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.185904980 CEST	443	60774	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.194713116 CEST	443	60770	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.194892883 CEST	443	60770	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.194935083 CEST	60770	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.194997072 CEST	60770	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.195002079 CEST	443	60770	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.195025921 CEST	60770	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.195029974 CEST	443	60770	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.198144913 CEST	60775	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.198188066 CEST	443	60775	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.198297024 CEST	60775	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.198468924 CEST	60775	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.198479891 CEST	443	60775	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.214107037 CEST	443	60769	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.214468002 CEST	443	60769	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.214519024 CEST	60769	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.214545012 CEST	60769	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.214549065 CEST	443	60769	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.214565992 CEST	60769	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.214569092 CEST	443	60769	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.217308998 CEST	60776	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.217346907 CEST	443	60776	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.217422009 CEST	60776	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.217669010 CEST	60776	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.217681885 CEST	443	60776	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.885535955 CEST	443	60773	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.887331963 CEST	60773	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.887423992 CEST	443	60773	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.887794018 CEST	60773	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.887830973 CEST	443	60773	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.892904043 CEST	443	60772	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.895951033 CEST	60772	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.895977020 CEST	443	60772	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.896390915 CEST	60772	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.896398067 CEST	443	60772	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.906061888 CEST	443	60774	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.906567097 CEST	60774	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.906620979 CEST	443	60774	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.907027960 CEST	60774	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.907048941 CEST	443	60774	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.928392887 CEST	443	60775	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.928837061 CEST	60775	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.928863049 CEST	443	60775	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.929351091 CEST	60775	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.929358959 CEST	443	60775	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.968856096 CEST	443	60776	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.969527006 CEST	60776	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.969552040 CEST	443	60776	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:25.970107079 CEST	60776	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:25.970120907 CEST	443	60776	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.014528990 CEST	443	60773	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.014806032 CEST	443	60773	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.014900923 CEST	60773	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.021446943 CEST	60773	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.021446943 CEST	60773	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.021498919 CEST	443	60773	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.021543980 CEST	443	60773	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.024220943 CEST	60778	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.024266958 CEST	443	60778	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.024389982 CEST	60778	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.024470091 CEST	60778	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.024477959 CEST	443	60778	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.024525881 CEST	443	60772	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.024694920 CEST	443	60772	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.024750948 CEST	60772	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.024805069 CEST	60772	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.024805069 CEST	60772	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.024825096 CEST	443	60772	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.024837017 CEST	443	60772	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.027299881 CEST	60779	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.027335882 CEST	443	60779	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.027502060 CEST	60779	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.027611971 CEST	60779	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.027626038 CEST	443	60779	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.035240889 CEST	443	60774	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.035442114 CEST	443	60774	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.035512924 CEST	60774	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.035566092 CEST	60774	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.035566092 CEST	60774	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.035586119 CEST	443	60774	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.035612106 CEST	443	60774	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.037666082 CEST	60780	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.037760019 CEST	443	60780	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.037851095 CEST	60780	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.037971020 CEST	60780	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.038005114 CEST	443	60780	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.057646036 CEST	443	60775	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.057811022 CEST	443	60775	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.057957888 CEST	60775	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.057998896 CEST	60775	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.058017969 CEST	443	60775	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.058043003 CEST	60775	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.058048964 CEST	443	60775	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.060324907 CEST	60781	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.060363054 CEST	443	60781	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.060458899 CEST	60781	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.060583115 CEST	60781	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.060597897 CEST	443	60781	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.102999926 CEST	443	60776	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.103176117 CEST	443	60776	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.103229046 CEST	60776	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.103296995 CEST	60776	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.103312016 CEST	443	60776	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.103329897 CEST	60776	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.103334904 CEST	443	60776	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.106014967 CEST	60782	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.106065035 CEST	443	60782	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.106168032 CEST	60782	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.106314898 CEST	60782	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.106327057 CEST	443	60782	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.764441967 CEST	443	60780	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.765039921 CEST	60780	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.765109062 CEST	443	60780	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.765607119 CEST	60780	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.765620947 CEST	443	60780	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.768415928 CEST	443	60778	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.768769026 CEST	60778	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.768791914 CEST	443	60778	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.769155979 CEST	60778	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.769160986 CEST	443	60778	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.779050112 CEST	443	60779	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.779443026 CEST	60779	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.779459953 CEST	443	60779	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.779937983 CEST	60779	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.779942036 CEST	443	60779	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.789949894 CEST	443	60781	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.790452957 CEST	60781	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.790469885 CEST	443	60781	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.790824890 CEST	60781	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.790831089 CEST	443	60781	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.829796076 CEST	443	60782	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.830385923 CEST	60782	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.830403090 CEST	443	60782	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.830770969 CEST	60782	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.830775976 CEST	443	60782	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.892800093 CEST	443	60780	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.892874002 CEST	443	60780	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.892959118 CEST	60780	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.893168926 CEST	60780	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.893217087 CEST	443	60780	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.893253088 CEST	60780	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.893269062 CEST	443	60780	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.895975113 CEST	60784	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.896030903 CEST	443	60784	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.896095037 CEST	60784	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.896261930 CEST	60784	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.896277905 CEST	443	60784	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.897944927 CEST	443	60778	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.898075104 CEST	443	60778	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.898123026 CEST	60778	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.898154020 CEST	60778	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.898169994 CEST	443	60778	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.898179054 CEST	60778	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.898184061 CEST	443	60778	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.900316954 CEST	60785	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.900357008 CEST	443	60785	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.900541067 CEST	60785	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.900541067 CEST	60785	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.900573015 CEST	443	60785	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.911514997 CEST	443	60779	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.911986113 CEST	443	60779	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.912039995 CEST	60779	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.912066936 CEST	60779	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.912076950 CEST	443	60779	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.912092924 CEST	60779	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.912097931 CEST	443	60779	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.914197922 CEST	60786	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.914232016 CEST	443	60786	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.914443970 CEST	60786	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.914622068 CEST	60786	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.914635897 CEST	443	60786	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.918833971 CEST	443	60781	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.918983936 CEST	443	60781	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.919053078 CEST	60781	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.919053078 CEST	60781	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.919176102 CEST	60781	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.919193029 CEST	443	60781	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.921200991 CEST	60787	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.921248913 CEST	443	60787	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.921473026 CEST	60787	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.921629906 CEST	60787	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.921646118 CEST	443	60787	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.958889961 CEST	443	60782	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.959088087 CEST	443	60782	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.959243059 CEST	60782	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.959359884 CEST	60782	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.959359884 CEST	60782	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.959376097 CEST	443	60782	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.959389925 CEST	443	60782	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.962387085 CEST	60788	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.962440968 CEST	443	60788	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:26.962562084 CEST	60788	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.962683916 CEST	60788	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:26.962697983 CEST	443	60788	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.659826040 CEST	443	60784	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.660590887 CEST	60784	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.660680056 CEST	443	60784	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.662401915 CEST	60784	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.662422895 CEST	443	60784	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.663141012 CEST	443	60785	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.663733006 CEST	60785	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.663760900 CEST	443	60785	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.664124012 CEST	60785	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.664138079 CEST	443	60785	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.664689064 CEST	443	60786	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.665627003 CEST	60786	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.665648937 CEST	443	60786	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.666017056 CEST	60786	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.666024923 CEST	443	60786	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.667324066 CEST	443	60787	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.667752028 CEST	60787	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.667767048 CEST	443	60787	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.668121099 CEST	60787	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.668127060 CEST	443	60787	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.688844919 CEST	443	60788	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.689467907 CEST	60788	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.689492941 CEST	443	60788	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.690107107 CEST	60788	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.690113068 CEST	443	60788	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.801783085 CEST	443	60786	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.801841021 CEST	443	60786	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.801914930 CEST	60786	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.802071095 CEST	60786	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.802090883 CEST	443	60786	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.802124023 CEST	443	60785	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.802160025 CEST	60786	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.802165985 CEST	443	60786	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.802191019 CEST	443	60785	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.802207947 CEST	443	60784	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.802280903 CEST	443	60787	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.802304983 CEST	60785	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.802354097 CEST	443	60787	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.802373886 CEST	443	60784	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.802406073 CEST	60787	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.802473068 CEST	60784	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.802540064 CEST	60784	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.802582979 CEST	443	60784	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.802617073 CEST	60784	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.802617073 CEST	60787	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.802617073 CEST	60787	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.802643061 CEST	443	60784	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.802664995 CEST	443	60787	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.802685022 CEST	443	60787	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.803544998 CEST	60785	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.803554058 CEST	443	60785	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.803590059 CEST	60785	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.803594112 CEST	443	60785	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.806637049 CEST	60789	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.806694031 CEST	443	60789	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.806761026 CEST	60789	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.807713985 CEST	60790	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.807723999 CEST	443	60790	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.807782888 CEST	60790	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.807991028 CEST	60789	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.808001041 CEST	443	60789	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.808298111 CEST	60790	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.808309078 CEST	443	60790	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.808804989 CEST	60791	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.808847904 CEST	443	60791	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.809055090 CEST	60791	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.809156895 CEST	60791	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.809175014 CEST	443	60791	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.809237957 CEST	60792	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.809273005 CEST	443	60792	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.809324026 CEST	60792	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.809536934 CEST	60792	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.809555054 CEST	443	60792	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.818444967 CEST	443	60788	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.818522930 CEST	443	60788	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.818594933 CEST	60788	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.818785906 CEST	60788	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.818799973 CEST	443	60788	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.818815947 CEST	60788	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.818820953 CEST	443	60788	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.821460962 CEST	60793	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.821549892 CEST	443	60793	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:27.821624041 CEST	60793	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.821765900 CEST	60793	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:27.821795940 CEST	443	60793	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.817879915 CEST	443	60792	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.818502903 CEST	60792	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.818526030 CEST	443	60792	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.818813086 CEST	443	60793	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.819559097 CEST	443	60791	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.819730997 CEST	60793	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.819797039 CEST	443	60793	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.820774078 CEST	443	60790	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.820909977 CEST	60792	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.820921898 CEST	443	60792	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.821080923 CEST	443	60789	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.821557999 CEST	60793	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.821573019 CEST	443	60793	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.822037935 CEST	60789	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.822122097 CEST	443	60789	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.822628975 CEST	60789	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.822643995 CEST	443	60789	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.822848082 CEST	60790	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.822863102 CEST	443	60790	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.823182106 CEST	60790	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.823194981 CEST	443	60790	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.823576927 CEST	60791	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.823610067 CEST	443	60791	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.824198961 CEST	60791	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.824208975 CEST	443	60791	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.965363979 CEST	443	60792	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.965584993 CEST	443	60792	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.965795994 CEST	60792	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.968485117 CEST	443	60791	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.969145060 CEST	443	60791	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.969199896 CEST	60791	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.969969034 CEST	60792	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.969969034 CEST	60792	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.969990969 CEST	443	60792	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.970000982 CEST	443	60792	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.971576929 CEST	60791	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.971609116 CEST	443	60791	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.971662045 CEST	60791	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.971668959 CEST	443	60791	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.972307920 CEST	443	60793	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.972385883 CEST	443	60793	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.972712994 CEST	60793	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.972894907 CEST	443	60790	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.972956896 CEST	443	60790	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.973038912 CEST	60790	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.973153114 CEST	60793	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.973169088 CEST	443	60793	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.973181963 CEST	60793	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.973187923 CEST	443	60793	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.974221945 CEST	60790	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.974252939 CEST	443	60790	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.974261999 CEST	60790	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.974270105 CEST	443	60790	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.974482059 CEST	443	60789	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.974545956 CEST	443	60789	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.974610090 CEST	60789	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.976383924 CEST	60794	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.976408005 CEST	443	60794	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.976722956 CEST	60794	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.976944923 CEST	60789	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.976972103 CEST	443	60789	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.976985931 CEST	60789	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.976991892 CEST	443	60789	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.978238106 CEST	60794	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.978251934 CEST	443	60794	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.980082989 CEST	60795	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.980108976 CEST	443	60795	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.980267048 CEST	60795	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.981659889 CEST	60796	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.981698990 CEST	443	60796	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.981923103 CEST	60796	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.982038021 CEST	60796	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.982057095 CEST	443	60796	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.982395887 CEST	60795	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.982408047 CEST	443	60795	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.983037949 CEST	60797	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.983057976 CEST	443	60797	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.983222961 CEST	60797	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.983412027 CEST	60797	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.983427048 CEST	443	60797	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.985497952 CEST	60798	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.985506058 CEST	443	60798	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:28.985801935 CEST	60798	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.985820055 CEST	60798	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:28.985825062 CEST	443	60798	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.820694923 CEST	443	60796	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.824819088 CEST	443	60795	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.825790882 CEST	60796	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.825809956 CEST	443	60796	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.826303959 CEST	60796	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.826308966 CEST	443	60796	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.826714039 CEST	60795	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.826730013 CEST	443	60795	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.827110052 CEST	60795	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.827115059 CEST	443	60795	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.828742027 CEST	443	60794	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.829032898 CEST	60794	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.829063892 CEST	443	60794	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.829385996 CEST	60794	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.829391003 CEST	443	60794	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.836437941 CEST	443	60797	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.836843967 CEST	60797	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.836858034 CEST	443	60797	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.837203979 CEST	60797	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.837208986 CEST	443	60797	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.840284109 CEST	443	60798	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.842256069 CEST	60798	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.842263937 CEST	443	60798	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.842602015 CEST	60798	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.842606068 CEST	443	60798	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.954057932 CEST	443	60796	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.955080986 CEST	443	60796	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.955154896 CEST	60796	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.955154896 CEST	60796	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.955403090 CEST	60796	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.955420971 CEST	443	60796	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.958117962 CEST	60799	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.958147049 CEST	443	60799	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.958385944 CEST	60799	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.958385944 CEST	60799	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.958412886 CEST	443	60799	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.962995052 CEST	443	60795	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.963279963 CEST	443	60795	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.963360071 CEST	60795	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.963515043 CEST	60795	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.963534117 CEST	443	60795	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.963543892 CEST	60795	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.963551044 CEST	443	60795	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.964188099 CEST	443	60794	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.965265989 CEST	443	60794	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.965348005 CEST	60794	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.966286898 CEST	60794	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.966309071 CEST	443	60794	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.966321945 CEST	60794	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.966326952 CEST	443	60794	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.966475010 CEST	60800	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.966527939 CEST	443	60800	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.966697931 CEST	60800	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.967741966 CEST	60800	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.967756987 CEST	443	60800	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.968601942 CEST	60801	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.968638897 CEST	443	60801	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.968713999 CEST	60801	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.968817949 CEST	60801	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.968832970 CEST	443	60801	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.970062017 CEST	443	60797	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.971278906 CEST	443	60797	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.971335888 CEST	60797	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.971421957 CEST	60797	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.971421957 CEST	60797	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.971431971 CEST	443	60797	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.971440077 CEST	443	60797	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.973354101 CEST	443	60798	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.974169016 CEST	60802	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.974195957 CEST	443	60802	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.974420071 CEST	60802	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.974751949 CEST	60802	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.974770069 CEST	443	60802	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.974896908 CEST	443	60798	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.974953890 CEST	60798	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.974987030 CEST	60798	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.974992990 CEST	443	60798	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.975004911 CEST	60798	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.975008965 CEST	443	60798	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.977960110 CEST	60803	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.977992058 CEST	443	60803	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:29.978076935 CEST	60803	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.978204966 CEST	60803	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:29.978214979 CEST	443	60803	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.748974085 CEST	443	60799	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.750808954 CEST	60799	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.750825882 CEST	443	60799	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.751259089 CEST	60799	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.751264095 CEST	443	60799	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.774148941 CEST	443	60800	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.774574041 CEST	60800	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.774610043 CEST	443	60800	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.775008917 CEST	60800	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.775015116 CEST	443	60800	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.775091887 CEST	443	60802	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.776994944 CEST	443	60801	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.777360916 CEST	60802	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.777401924 CEST	443	60802	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.777787924 CEST	60802	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.777792931 CEST	443	60802	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.777806997 CEST	60801	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.777812004 CEST	443	60801	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.778215885 CEST	60801	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.778218985 CEST	443	60801	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.778564930 CEST	443	60803	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.780667067 CEST	60803	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.780675888 CEST	443	60803	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.781059980 CEST	60803	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.781064987 CEST	443	60803	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.890569925 CEST	443	60799	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.890594006 CEST	443	60799	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.890650034 CEST	443	60799	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.890706062 CEST	60799	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.890760899 CEST	60799	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.890945911 CEST	60799	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.890969992 CEST	443	60799	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.890984058 CEST	60799	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.890991926 CEST	443	60799	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.893367052 CEST	60805	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.893414974 CEST	443	60805	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.893495083 CEST	60805	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.893636942 CEST	60805	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.893651962 CEST	443	60805	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.918751955 CEST	443	60800	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.918812990 CEST	443	60800	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.919009924 CEST	60800	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.919249058 CEST	60800	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.919270039 CEST	443	60800	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.919284105 CEST	60800	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.919290066 CEST	443	60800	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.920967102 CEST	443	60802	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.920989990 CEST	443	60802	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.921041012 CEST	443	60802	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.921061039 CEST	60802	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.921098948 CEST	60802	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.921215057 CEST	60802	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.921228886 CEST	443	60802	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.921238899 CEST	60802	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.921243906 CEST	443	60802	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.922055006 CEST	443	60803	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.922056913 CEST	443	60801	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.922086954 CEST	443	60803	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.922121048 CEST	443	60801	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.922146082 CEST	443	60803	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.922152042 CEST	60803	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.922190905 CEST	60801	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.922295094 CEST	60803	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.922297001 CEST	60801	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.922301054 CEST	443	60801	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.922312975 CEST	60801	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.922316074 CEST	443	60801	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.922375917 CEST	60806	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.922388077 CEST	443	60806	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.922445059 CEST	60806	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.922467947 CEST	60803	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.922473907 CEST	443	60803	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.922485113 CEST	60803	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.922488928 CEST	443	60803	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.923542023 CEST	60806	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.923552036 CEST	443	60806	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.924117088 CEST	60807	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.924158096 CEST	443	60807	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.924210072 CEST	60807	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.924323082 CEST	60807	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.924334049 CEST	443	60807	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.924597025 CEST	60808	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.924618959 CEST	443	60808	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.925263882 CEST	60809	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.925299883 CEST	60808	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.925302029 CEST	443	60809	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.925343990 CEST	60809	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.925442934 CEST	60808	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.925451994 CEST	443	60808	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:30.925468922 CEST	60809	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:30.925481081 CEST	443	60809	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.755616903 CEST	443	60808	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.758027077 CEST	443	60806	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.776570082 CEST	443	60805	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.803245068 CEST	60808	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.803270102 CEST	443	60808	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.805013895 CEST	60806	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.810563087 CEST	60808	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.810585022 CEST	443	60808	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.814213991 CEST	60806	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.814239025 CEST	443	60806	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.820596933 CEST	443	60807	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.821129084 CEST	60806	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.821187019 CEST	443	60806	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.821234941 CEST	60805	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.821396112 CEST	60807	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.821439981 CEST	443	60807	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.824697018 CEST	443	60809	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.827802896 CEST	60807	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.827810049 CEST	443	60807	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.828078032 CEST	60809	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.828108072 CEST	443	60809	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.831767082 CEST	60809	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.831775904 CEST	443	60809	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.835336924 CEST	60805	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.835359097 CEST	443	60805	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.839219093 CEST	60805	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.839235067 CEST	443	60805	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.976969004 CEST	443	60808	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.977230072 CEST	443	60808	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.977308989 CEST	60808	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.977915049 CEST	60808	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.977930069 CEST	443	60808	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.977941036 CEST	60808	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.977947950 CEST	443	60808	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.980954885 CEST	60810	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.981007099 CEST	443	60810	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.981183052 CEST	60810	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.981400967 CEST	60810	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.981420994 CEST	443	60810	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.987982988 CEST	443	60806	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.989815950 CEST	443	60806	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.990070105 CEST	60806	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.990335941 CEST	60806	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.990335941 CEST	60806	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.990376949 CEST	443	60806	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.990406036 CEST	443	60806	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.993738890 CEST	60811	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.993767977 CEST	443	60811	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:31.993818045 CEST	60811	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.993952036 CEST	60811	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:31.993961096 CEST	443	60811	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.012904882 CEST	443	60805	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.012938023 CEST	443	60805	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.012996912 CEST	443	60805	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.013062954 CEST	60805	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.013303995 CEST	60805	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.013329983 CEST	443	60805	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.013366938 CEST	60805	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.013375044 CEST	443	60805	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.016801119 CEST	60812	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.016840935 CEST	443	60812	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.016913891 CEST	60812	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.017034054 CEST	60812	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.017047882 CEST	443	60812	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.034279108 CEST	443	60807	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.034343004 CEST	443	60807	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.034457922 CEST	60807	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.034660101 CEST	60807	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.034684896 CEST	443	60807	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.034717083 CEST	60807	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.034730911 CEST	443	60807	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.038393021 CEST	60813	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.038446903 CEST	443	60813	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.038503885 CEST	60813	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.038646936 CEST	60813	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.038660049 CEST	443	60813	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.039078951 CEST	443	60809	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.039285898 CEST	443	60809	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.039398909 CEST	60809	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.039654970 CEST	60809	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.039675951 CEST	443	60809	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.039688110 CEST	60809	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.039693117 CEST	443	60809	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.042207956 CEST	60814	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.042233944 CEST	443	60814	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.042360067 CEST	60814	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.042532921 CEST	60814	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.042551041 CEST	443	60814	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.807925940 CEST	443	60811	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.808417082 CEST	60811	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.808434010 CEST	443	60811	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.808881044 CEST	60811	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.808886051 CEST	443	60811	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.817910910 CEST	443	60812	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.818296909 CEST	60812	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.818386078 CEST	443	60812	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.818743944 CEST	60812	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.818759918 CEST	443	60812	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.818773031 CEST	443	60810	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.819092035 CEST	60810	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.819116116 CEST	443	60810	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.819473982 CEST	60810	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.819479942 CEST	443	60810	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.832288980 CEST	443	60814	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.832642078 CEST	60814	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.832655907 CEST	443	60814	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.833015919 CEST	60814	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.833020926 CEST	443	60814	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.962011099 CEST	443	60811	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.962615967 CEST	443	60811	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.962681055 CEST	60811	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.962719917 CEST	60811	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.962732077 CEST	443	60811	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.962744951 CEST	60811	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.962749958 CEST	443	60811	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.965373039 CEST	60815	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.965485096 CEST	443	60815	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.965580940 CEST	60815	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.965730906 CEST	60815	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.965760946 CEST	443	60815	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.966273069 CEST	443	60812	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.966345072 CEST	443	60812	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.966492891 CEST	60812	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.966557026 CEST	60812	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.966557026 CEST	60812	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.966599941 CEST	443	60812	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.966623068 CEST	443	60812	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.968563080 CEST	60816	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.968611002 CEST	443	60816	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.968662024 CEST	443	60810	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.968693972 CEST	60816	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.968847990 CEST	60816	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.968863964 CEST	443	60816	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.968868017 CEST	443	60810	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.968924999 CEST	60810	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.968974113 CEST	60810	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.968992949 CEST	443	60810	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.969012976 CEST	60810	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.969017982 CEST	443	60810	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.971004963 CEST	60817	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.971031904 CEST	443	60817	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.971190929 CEST	60817	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.971323967 CEST	60817	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.971334934 CEST	443	60817	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.972923040 CEST	443	60814	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.973154068 CEST	443	60814	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.973215103 CEST	60814	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.973263025 CEST	60814	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.973278046 CEST	443	60814	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.973289013 CEST	60814	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.973295927 CEST	443	60814	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.975276947 CEST	60818	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.975294113 CEST	443	60818	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:32.975354910 CEST	60818	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.975502968 CEST	60818	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:32.975516081 CEST	443	60818	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.220001936 CEST	443	60813	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.220561981 CEST	60813	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.220596075 CEST	443	60813	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.221041918 CEST	60813	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.221051931 CEST	443	60813	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.368664980 CEST	443	60813	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.368738890 CEST	443	60813	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.368779898 CEST	60813	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.368951082 CEST	60813	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.368973017 CEST	443	60813	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.368984938 CEST	60813	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.368992090 CEST	443	60813	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.371671915 CEST	60819	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.371722937 CEST	443	60819	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.371885061 CEST	60819	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.372026920 CEST	60819	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.372040987 CEST	443	60819	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.723364115 CEST	443	60815	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.723782063 CEST	60815	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.723807096 CEST	443	60815	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.724492073 CEST	60815	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.724498034 CEST	443	60815	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.743695974 CEST	443	60817	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.744318008 CEST	60817	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.744354010 CEST	443	60817	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.744956970 CEST	60817	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.744961977 CEST	443	60817	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.753724098 CEST	443	60816	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.754371881 CEST	60816	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.754399061 CEST	443	60816	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.754935980 CEST	60816	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.754941940 CEST	443	60816	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.757407904 CEST	443	60818	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.757797003 CEST	60818	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.757805109 CEST	443	60818	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.758446932 CEST	60818	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.758450985 CEST	443	60818	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.922246933 CEST	443	60815	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.922409058 CEST	443	60815	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.922528982 CEST	60815	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.922593117 CEST	60815	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.922607899 CEST	443	60815	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.922640085 CEST	60815	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.922646046 CEST	443	60815	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.924464941 CEST	443	60817	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.924536943 CEST	443	60817	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.924587011 CEST	443	60816	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.924608946 CEST	60817	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.924618959 CEST	443	60816	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.924664974 CEST	443	60816	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.924676895 CEST	60816	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.924710989 CEST	60816	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.924977064 CEST	60817	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.924990892 CEST	443	60817	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.925010920 CEST	60817	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.925015926 CEST	443	60817	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.925286055 CEST	443	60818	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.925312996 CEST	60821	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.925321102 CEST	443	60818	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.925350904 CEST	443	60821	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.925359964 CEST	60818	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.925368071 CEST	443	60818	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.925379992 CEST	443	60818	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.925409079 CEST	60821	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.925441980 CEST	60818	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.925446033 CEST	60816	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.925467014 CEST	443	60816	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.925486088 CEST	60816	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.925493002 CEST	443	60816	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.926191092 CEST	60818	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.926194906 CEST	443	60818	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.926206112 CEST	60818	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.926209927 CEST	443	60818	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.926465034 CEST	60821	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.926479101 CEST	443	60821	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.928309917 CEST	60822	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.928317070 CEST	443	60822	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.928374052 CEST	60822	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.928442001 CEST	60823	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.928483963 CEST	443	60823	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.928536892 CEST	60823	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.928777933 CEST	60822	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.928786039 CEST	443	60822	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.929115057 CEST	60823	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.929126024 CEST	443	60823	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.929142952 CEST	60824	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.929168940 CEST	443	60824	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:33.929218054 CEST	60824	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.929335117 CEST	60824	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:33.929347038 CEST	443	60824	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.194757938 CEST	443	60819	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.195270061 CEST	60819	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.195314884 CEST	443	60819	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.196396112 CEST	60819	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.196403980 CEST	443	60819	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.342037916 CEST	443	60819	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.342125893 CEST	443	60819	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.342453957 CEST	60819	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.346366882 CEST	60819	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.346405029 CEST	443	60819	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.346427917 CEST	60819	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.346436977 CEST	443	60819	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.372927904 CEST	60825	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.372980118 CEST	443	60825	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.373224020 CEST	60825	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.373414993 CEST	60825	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.373429060 CEST	443	60825	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.702954054 CEST	443	60822	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.703506947 CEST	60822	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.703533888 CEST	443	60822	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.703994989 CEST	60822	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.704000950 CEST	443	60822	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.705858946 CEST	443	60823	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.706245899 CEST	60823	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.706285000 CEST	443	60823	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.706789970 CEST	60823	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.706804037 CEST	443	60823	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.707835913 CEST	443	60824	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.708235025 CEST	60824	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.708250999 CEST	443	60824	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.708647013 CEST	60824	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.708655119 CEST	443	60824	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.727951050 CEST	443	60821	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.728399038 CEST	60821	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.728416920 CEST	443	60821	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.728889942 CEST	60821	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.728897095 CEST	443	60821	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.860344887 CEST	443	60823	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.860569000 CEST	443	60822	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.860806942 CEST	443	60822	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.860878944 CEST	60822	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.860958099 CEST	60822	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.860958099 CEST	60822	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.860995054 CEST	443	60823	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.860996962 CEST	443	60822	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.861022949 CEST	443	60822	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.861061096 CEST	60823	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.861125946 CEST	60823	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.861176014 CEST	443	60823	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.861211061 CEST	60823	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.861227989 CEST	443	60823	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.863604069 CEST	60826	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.863631964 CEST	60827	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.863665104 CEST	443	60827	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.863688946 CEST	443	60826	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.863727093 CEST	60827	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.863764048 CEST	60826	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.863908052 CEST	60826	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.863928080 CEST	60827	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.863938093 CEST	443	60827	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.863946915 CEST	443	60826	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.866132975 CEST	443	60824	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.866252899 CEST	443	60824	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.866301060 CEST	60824	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.866311073 CEST	443	60824	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.866381884 CEST	443	60824	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.866537094 CEST	60824	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.866648912 CEST	60824	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.866661072 CEST	443	60824	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.866672039 CEST	60824	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.866676092 CEST	443	60824	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.868697882 CEST	60828	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.868735075 CEST	443	60828	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.868796110 CEST	60828	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.868908882 CEST	60828	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.868921995 CEST	443	60828	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.890010118 CEST	443	60821	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.890175104 CEST	443	60821	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.890255928 CEST	60821	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.890341997 CEST	60821	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.890342951 CEST	60821	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.890388966 CEST	443	60821	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.890420914 CEST	443	60821	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.892131090 CEST	60829	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.892169952 CEST	443	60829	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:34.892268896 CEST	60829	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.892395020 CEST	60829	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:34.892416954 CEST	443	60829	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.186943054 CEST	443	60825	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.187582016 CEST	60825	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.187638044 CEST	443	60825	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.188047886 CEST	60825	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.188060999 CEST	443	60825	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.582024097 CEST	443	60825	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.582895994 CEST	443	60825	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.582968950 CEST	60825	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.583058119 CEST	60825	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.583058119 CEST	60825	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.583120108 CEST	443	60825	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.583148003 CEST	443	60825	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.585648060 CEST	60830	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.585690975 CEST	443	60830	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.585756063 CEST	60830	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.585927010 CEST	60830	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.585943937 CEST	443	60830	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.716876030 CEST	443	60826	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.720823050 CEST	60826	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.720887899 CEST	443	60826	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.721302032 CEST	60826	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.721316099 CEST	443	60826	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.730866909 CEST	443	60829	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.731421947 CEST	60829	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.731434107 CEST	443	60829	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.731808901 CEST	60829	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.731812954 CEST	443	60829	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.732522964 CEST	443	60827	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.732912064 CEST	60827	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.732923985 CEST	443	60827	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.733325005 CEST	60827	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.733330011 CEST	443	60827	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.739660025 CEST	443	60828	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.740075111 CEST	60828	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.740104914 CEST	443	60828	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.740355968 CEST	60828	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.740362883 CEST	443	60828	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.845983028 CEST	443	60826	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.846054077 CEST	443	60826	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.846175909 CEST	60826	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.846420050 CEST	60826	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.846420050 CEST	60826	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.846479893 CEST	443	60826	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.846508026 CEST	443	60826	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.848861933 CEST	60831	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.848913908 CEST	443	60831	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.848997116 CEST	60831	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.849138975 CEST	60831	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.849150896 CEST	443	60831	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.857009888 CEST	443	60829	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.857037067 CEST	443	60829	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.857070923 CEST	443	60829	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.857105017 CEST	60829	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.857126951 CEST	60829	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.857256889 CEST	60829	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.857269049 CEST	443	60829	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.857278109 CEST	60829	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.857284069 CEST	443	60829	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.859141111 CEST	60832	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.859150887 CEST	443	60832	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.859222889 CEST	60832	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.859332085 CEST	60832	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.859343052 CEST	443	60832	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.862055063 CEST	443	60827	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.862128973 CEST	443	60827	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.862186909 CEST	60827	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.862199068 CEST	443	60827	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.862236977 CEST	443	60827	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.862286091 CEST	60827	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.862333059 CEST	60827	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.862354994 CEST	443	60827	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.862365961 CEST	60827	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.862371922 CEST	443	60827	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.864074945 CEST	60833	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.864097118 CEST	443	60833	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.864171028 CEST	60833	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.864291906 CEST	60833	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.864304066 CEST	443	60833	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.871851921 CEST	443	60828	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.872092962 CEST	443	60828	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.872168064 CEST	60828	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.872320890 CEST	60828	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.872320890 CEST	60828	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.872333050 CEST	443	60828	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.872339964 CEST	443	60828	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.874058008 CEST	60834	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.874078989 CEST	443	60834	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:35.874152899 CEST	60834	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.874264002 CEST	60834	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:35.874274969 CEST	443	60834	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.350505114 CEST	443	60830	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.364969015 CEST	60830	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.364988089 CEST	443	60830	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.365423918 CEST	60830	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.365428925 CEST	443	60830	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.494393110 CEST	443	60830	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.494836092 CEST	443	60830	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.494904041 CEST	60830	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.495003939 CEST	60830	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.495017052 CEST	443	60830	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.495028019 CEST	60830	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.495033979 CEST	443	60830	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.497958899 CEST	60835	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.498011112 CEST	443	60835	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.498071909 CEST	60835	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.498311996 CEST	60835	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.498325109 CEST	443	60835	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.669830084 CEST	443	60831	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.669842005 CEST	443	60834	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.670274973 CEST	60831	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.670296907 CEST	443	60831	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.670749903 CEST	60831	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.670756102 CEST	443	60831	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.670981884 CEST	60834	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.670991898 CEST	443	60834	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.671376944 CEST	60834	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.671380997 CEST	443	60834	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.671876907 CEST	443	60832	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.672207117 CEST	60832	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.672214985 CEST	443	60832	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.672607899 CEST	60832	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.672611952 CEST	443	60832	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.674334049 CEST	443	60833	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.675663948 CEST	60833	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.675669909 CEST	443	60833	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.676141024 CEST	60833	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.676146984 CEST	443	60833	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.810300112 CEST	443	60831	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.811080933 CEST	443	60831	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.811260939 CEST	60831	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.811294079 CEST	443	60833	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.811363935 CEST	443	60833	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.811503887 CEST	443	60833	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.811563015 CEST	60833	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.811593056 CEST	60831	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.811605930 CEST	443	60831	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.811616898 CEST	60831	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.811623096 CEST	443	60831	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.811691046 CEST	443	60834	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.811754942 CEST	443	60834	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.812438965 CEST	60834	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.812917948 CEST	60833	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.812930107 CEST	443	60833	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.812937021 CEST	443	60832	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.812938929 CEST	60833	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.812944889 CEST	443	60833	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.813247919 CEST	443	60832	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.813798904 CEST	60834	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.813802958 CEST	443	60834	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.813824892 CEST	60832	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.814918995 CEST	60832	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.814929008 CEST	443	60832	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.814938068 CEST	60832	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.814944029 CEST	443	60832	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.817084074 CEST	60836	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.817132950 CEST	443	60836	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.817193985 CEST	60836	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.817410946 CEST	60836	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.817425013 CEST	443	60836	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.818413019 CEST	60837	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.818445921 CEST	443	60837	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.819570065 CEST	60838	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.819576979 CEST	443	60838	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.819606066 CEST	60837	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.819633007 CEST	60838	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.819745064 CEST	60837	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.819758892 CEST	443	60837	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.820358992 CEST	60839	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.820374012 CEST	443	60839	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.820425034 CEST	60839	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.820535898 CEST	60838	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.820547104 CEST	443	60838	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:36.820777893 CEST	60839	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:36.820787907 CEST	443	60839	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.336759090 CEST	443	60835	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.337407112 CEST	60835	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.337419033 CEST	443	60835	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.337873936 CEST	60835	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.337881088 CEST	443	60835	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.472486973 CEST	443	60835	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.472806931 CEST	443	60835	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.472883940 CEST	60835	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.472954035 CEST	60835	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.472980022 CEST	443	60835	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.472992897 CEST	60835	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.472999096 CEST	443	60835	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.476161003 CEST	60840	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.476213932 CEST	443	60840	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.476326942 CEST	60840	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.476511002 CEST	60840	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.476526976 CEST	443	60840	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.622123003 CEST	443	60837	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.622699022 CEST	60837	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.622769117 CEST	443	60837	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.623131037 CEST	60837	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.623150110 CEST	443	60837	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.628418922 CEST	443	60838	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.628669977 CEST	60838	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.628685951 CEST	443	60838	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.628988028 CEST	60838	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.628998041 CEST	443	60838	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.629436016 CEST	443	60839	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.629504919 CEST	443	60836	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.629695892 CEST	60839	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.629729033 CEST	443	60839	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.629801989 CEST	60836	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.629811049 CEST	443	60836	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.630114079 CEST	60839	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.630119085 CEST	443	60839	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.630156994 CEST	60836	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.630162001 CEST	443	60836	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.793123960 CEST	443	60837	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.793205976 CEST	443	60837	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.793283939 CEST	60837	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.793323994 CEST	443	60837	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.793531895 CEST	60837	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.793531895 CEST	60837	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.793566942 CEST	443	60837	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.793597937 CEST	443	60837	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.793836117 CEST	443	60838	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.793895960 CEST	443	60838	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.793946981 CEST	60838	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.794827938 CEST	443	60839	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.795011997 CEST	443	60839	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.795089006 CEST	60839	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.795403004 CEST	443	60836	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.795470953 CEST	443	60836	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.795520067 CEST	60836	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.800738096 CEST	60839	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.800759077 CEST	443	60839	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.800786972 CEST	60839	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.800792933 CEST	443	60839	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.801111937 CEST	60836	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.801116943 CEST	443	60836	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.801134109 CEST	60836	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.801136971 CEST	443	60836	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.802035093 CEST	60838	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.802098036 CEST	443	60838	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.802143097 CEST	60838	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.802162886 CEST	443	60838	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.804600000 CEST	60841	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.804656982 CEST	443	60841	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.804729939 CEST	60841	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.804858923 CEST	60841	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.804868937 CEST	443	60841	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.804913998 CEST	60842	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.804922104 CEST	443	60842	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.804986000 CEST	60842	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.805232048 CEST	60843	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.805268049 CEST	443	60843	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.805315971 CEST	60843	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.805457115 CEST	60843	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.805465937 CEST	443	60843	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.805613041 CEST	60842	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.805620909 CEST	443	60842	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.805903912 CEST	60844	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.805938005 CEST	443	60844	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:37.805995941 CEST	60844	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.806116104 CEST	60844	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:37.806130886 CEST	443	60844	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.272866011 CEST	443	60840	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.273411036 CEST	60840	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.273446083 CEST	443	60840	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.273871899 CEST	60840	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.273879051 CEST	443	60840	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.418049097 CEST	443	60840	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.418159962 CEST	443	60840	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.418246984 CEST	60840	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.418387890 CEST	60840	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.418436050 CEST	443	60840	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.418468952 CEST	60840	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.418484926 CEST	443	60840	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.421139956 CEST	60845	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.421185017 CEST	443	60845	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.421260118 CEST	60845	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.421431065 CEST	60845	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.421439886 CEST	443	60845	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.593524933 CEST	443	60841	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.594098091 CEST	60841	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.594187975 CEST	443	60841	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.594618082 CEST	60841	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.594634056 CEST	443	60841	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.595659018 CEST	443	60843	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.595998049 CEST	60843	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.596041918 CEST	443	60843	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.596360922 CEST	60843	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.596375942 CEST	443	60843	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.600833893 CEST	443	60842	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.601149082 CEST	60842	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.601166010 CEST	443	60842	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.601535082 CEST	60842	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.601545095 CEST	443	60842	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.608807087 CEST	443	60844	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.609117985 CEST	60844	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.609149933 CEST	443	60844	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.609468937 CEST	60844	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.609484911 CEST	443	60844	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.748965979 CEST	443	60841	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.749144077 CEST	443	60841	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.749303102 CEST	60841	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.749370098 CEST	60841	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.749370098 CEST	60841	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.749409914 CEST	443	60841	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.749434948 CEST	443	60841	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.749795914 CEST	443	60843	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.749924898 CEST	443	60843	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.750004053 CEST	60843	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.750142097 CEST	60843	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.750174046 CEST	443	60843	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.750200987 CEST	60843	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.750216007 CEST	443	60843	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.752125978 CEST	60846	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.752175093 CEST	443	60846	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.752207994 CEST	60847	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.752244949 CEST	60846	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.752315998 CEST	443	60847	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.752379894 CEST	60847	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.752418041 CEST	60846	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.752427101 CEST	443	60846	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.752527952 CEST	60847	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.752547026 CEST	443	60847	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.753642082 CEST	443	60842	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.753832102 CEST	443	60842	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.753909111 CEST	60842	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.753909111 CEST	60842	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.753950119 CEST	60842	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.753962994 CEST	443	60842	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.755832911 CEST	443	60844	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.755911112 CEST	60848	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.755961895 CEST	443	60844	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.755981922 CEST	443	60848	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.756050110 CEST	60844	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.756072044 CEST	443	60844	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.756071091 CEST	60848	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.756192923 CEST	60848	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.756220102 CEST	443	60848	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.756247997 CEST	60844	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.756266117 CEST	443	60844	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.756288052 CEST	60844	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.756524086 CEST	443	60844	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.758049011 CEST	60849	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.758078098 CEST	443	60849	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:38.758265018 CEST	60849	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.758404970 CEST	60849	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:38.758418083 CEST	443	60849	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.297719955 CEST	443	60845	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.299266100 CEST	60845	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.299314976 CEST	443	60845	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.299699068 CEST	60845	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.299705982 CEST	443	60845	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.451534986 CEST	443	60845	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.451572895 CEST	443	60845	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.451625109 CEST	443	60845	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.451689005 CEST	60845	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.451723099 CEST	60845	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.465692997 CEST	60845	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.465730906 CEST	443	60845	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.465766907 CEST	60845	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.465774059 CEST	443	60845	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.578624010 CEST	443	60846	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.581907988 CEST	443	60847	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.585143089 CEST	443	60849	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.633184910 CEST	60846	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.633186102 CEST	60847	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.633188009 CEST	60849	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.761708975 CEST	443	60848	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.783662081 CEST	60846	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.783683062 CEST	443	60846	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.784141064 CEST	60846	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.784147978 CEST	443	60846	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.784610987 CEST	60847	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.784646988 CEST	443	60847	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.785027981 CEST	60847	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.785041094 CEST	443	60847	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.785296917 CEST	60849	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.785307884 CEST	443	60849	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.785761118 CEST	60849	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.785765886 CEST	443	60849	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.787036896 CEST	60848	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.787091017 CEST	443	60848	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.787446022 CEST	60848	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.787462950 CEST	443	60848	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.814785004 CEST	60850	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.814821005 CEST	443	60850	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.814872980 CEST	60850	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.825833082 CEST	60850	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.825850964 CEST	443	60850	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.963527918 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:39.968775988 CEST	443	60847	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.968839884 CEST	443	60847	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.968955994 CEST	443	60847	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.968988895 CEST	60847	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.969022036 CEST	60847	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.969147921 CEST	60847	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.969199896 CEST	443	60847	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.969224930 CEST	60847	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.969238997 CEST	443	60847	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.969701052 CEST	443	60849	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.969734907 CEST	443	60849	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.969778061 CEST	60849	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.969791889 CEST	443	60849	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.969806910 CEST	443	60849	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.969855070 CEST	60849	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.970010042 CEST	60849	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.970025063 CEST	443	60849	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.970035076 CEST	60849	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.970041990 CEST	443	60849	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.971657038 CEST	60852	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.971685886 CEST	443	60852	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.971759081 CEST	60852	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.971863031 CEST	60853	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.971888065 CEST	443	60853	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.971901894 CEST	60852	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.971913099 CEST	443	60852	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.971946955 CEST	60853	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.972038984 CEST	60853	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.972052097 CEST	443	60853	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.974091053 CEST	443	60848	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.974165916 CEST	443	60848	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.974231005 CEST	60848	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.974318027 CEST	60848	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.974354029 CEST	443	60848	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.974383116 CEST	60848	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.974404097 CEST	443	60848	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.974927902 CEST	443	60846	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.974991083 CEST	443	60846	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.975039005 CEST	60846	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.975145102 CEST	60846	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.975157022 CEST	443	60846	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.975167036 CEST	60846	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.975172997 CEST	443	60846	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.975192070 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:39.975255013 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:39.976100922 CEST	60854	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.976110935 CEST	443	60854	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.976177931 CEST	60854	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.977998018 CEST	60855	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.978008986 CEST	443	60855	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.978060961 CEST	60855	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.978168011 CEST	60854	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.978179932 CEST	443	60854	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:39.978312016 CEST	60855	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:39.978323936 CEST	443	60855	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.005424023 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:40.010705948 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:40.117810965 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:40.176002026 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:40.227907896 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:40.233558893 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:40.336551905 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:40.342508078 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:40.446062088 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:40.455806017 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:40.555306911 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:40.576853037 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:40.629417896 CEST	443	60850	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.630836964 CEST	60850	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.630862951 CEST	443	60850	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.631407976 CEST	60850	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.631413937 CEST	443	60850	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.665740013 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:40.671456099 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:40.746227026 CEST	443	60853	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.746812105 CEST	60853	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.746824026 CEST	443	60853	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.747265100 CEST	60853	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.747268915 CEST	443	60853	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.763274908 CEST	443	60852	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.763639927 CEST	60852	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.763658047 CEST	443	60852	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.764040947 CEST	60852	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.764045954 CEST	443	60852	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.768744946 CEST	443	60850	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.769066095 CEST	443	60850	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.769153118 CEST	60850	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.769153118 CEST	60850	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.769196987 CEST	60850	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.769212008 CEST	443	60850	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.771764040 CEST	60856	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.771815062 CEST	443	60856	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.771897078 CEST	60856	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.772047043 CEST	60856	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.772064924 CEST	443	60856	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.774005890 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:40.820189953 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:40.833534002 CEST	443	60854	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.833998919 CEST	60854	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.834012032 CEST	443	60854	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.834467888 CEST	60854	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.834472895 CEST	443	60854	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.867521048 CEST	443	60855	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.868051052 CEST	60855	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.868069887 CEST	443	60855	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.868510008 CEST	60855	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.868515968 CEST	443	60855	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.886452913 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:40.892971992 CEST	443	60853	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.893033981 CEST	443	60853	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.893253088 CEST	60853	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.893326044 CEST	60853	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.893338919 CEST	443	60853	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.893349886 CEST	60853	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.893354893 CEST	443	60853	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.896100044 CEST	60857	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.896128893 CEST	443	60857	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.896210909 CEST	60857	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.896374941 CEST	60857	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.896392107 CEST	443	60857	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.900424004 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:40.957581043 CEST	443	60852	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.957623005 CEST	443	60852	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.957684040 CEST	443	60852	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.957741022 CEST	60852	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.957930088 CEST	60852	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.957947969 CEST	443	60852	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.957961082 CEST	60852	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.957966089 CEST	443	60852	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.960939884 CEST	60858	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.960957050 CEST	443	60858	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.961055994 CEST	60858	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.961189985 CEST	60858	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:40.961204052 CEST	443	60858	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:40.992788076 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:41.010413885 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:41.041069984 CEST	443	60854	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.041105986 CEST	443	60854	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.041177034 CEST	443	60854	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.041179895 CEST	60854	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.041225910 CEST	60854	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.041455030 CEST	60854	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.041455030 CEST	60854	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.041472912 CEST	443	60854	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.041481972 CEST	443	60854	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.044298887 CEST	60859	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.044348955 CEST	443	60859	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.044425964 CEST	60859	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.044578075 CEST	60859	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.044584990 CEST	443	60859	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.047816038 CEST	443	60855	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.048003912 CEST	443	60855	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.048060894 CEST	60855	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.048091888 CEST	60855	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.048105955 CEST	443	60855	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.048116922 CEST	60855	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.048122883 CEST	443	60855	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.050523043 CEST	60860	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.050625086 CEST	443	60860	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.050724030 CEST	60860	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.050889015 CEST	60860	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.050925016 CEST	443	60860	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.102298975 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:41.140712023 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:41.211510897 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:41.224133015 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:41.321737051 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:41.329091072 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:41.430325985 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:41.435578108 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:41.540438890 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:41.546504974 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:41.649303913 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:41.654766083 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:41.672069073 CEST	443	60856	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.672552109 CEST	60856	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.672580004 CEST	443	60856	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.673001051 CEST	60856	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.673007011 CEST	443	60856	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.709949017 CEST	443	60857	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.710422993 CEST	60857	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.710500002 CEST	443	60857	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.710875988 CEST	60857	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.710892916 CEST	443	60857	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.758399963 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:41.764662027 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:41.765232086 CEST	443	60858	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.765722990 CEST	60858	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.765748978 CEST	443	60858	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.766238928 CEST	60858	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.766252041 CEST	443	60858	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.814783096 CEST	443	60856	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.815102100 CEST	443	60856	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.815152884 CEST	60856	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.815249920 CEST	60856	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.815268040 CEST	443	60856	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.815279007 CEST	60856	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.815284014 CEST	443	60856	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.818003893 CEST	60861	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.818084955 CEST	443	60861	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.818166018 CEST	60861	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.818304062 CEST	60861	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.818325043 CEST	443	60861	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.844882011 CEST	443	60857	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.845063925 CEST	443	60857	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.845406055 CEST	60857	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.845467091 CEST	60857	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.845467091 CEST	60857	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.845515013 CEST	443	60857	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.845540047 CEST	443	60857	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.848172903 CEST	60862	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.848208904 CEST	443	60862	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.848351002 CEST	60862	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.848484039 CEST	60862	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.848495960 CEST	443	60862	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.867835999 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:41.871994019 CEST	443	60860	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.872464895 CEST	60860	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.872529030 CEST	443	60860	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.872883081 CEST	60860	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.872899055 CEST	443	60860	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.873181105 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:41.890639067 CEST	443	60859	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.891060114 CEST	60859	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.891092062 CEST	443	60859	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.891448021 CEST	60859	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.891453981 CEST	443	60859	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.901026964 CEST	443	60858	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.901093960 CEST	443	60858	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.901177883 CEST	60858	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.901192904 CEST	443	60858	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.901321888 CEST	60858	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.901321888 CEST	60858	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.901321888 CEST	60858	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.901354074 CEST	443	60858	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.903548002 CEST	60863	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.903610945 CEST	443	60863	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:41.903681993 CEST	60863	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.903780937 CEST	60863	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:41.903798103 CEST	443	60863	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.002777100 CEST	443	60860	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.002983093 CEST	443	60860	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.003065109 CEST	443	60860	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.003130913 CEST	60860	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.003206015 CEST	60860	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.004818916 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:42.005435944 CEST	60860	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.005487919 CEST	443	60860	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.005517006 CEST	60860	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.005532980 CEST	443	60860	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.008063078 CEST	60864	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.008109093 CEST	443	60864	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.008200884 CEST	60864	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.008624077 CEST	60864	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.008636951 CEST	443	60864	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.009824038 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:42.026855946 CEST	443	60859	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.026920080 CEST	443	60859	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.027019024 CEST	60859	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.031271935 CEST	60859	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.031287909 CEST	443	60859	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.031302929 CEST	60859	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.031307936 CEST	443	60859	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.034421921 CEST	60865	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.034468889 CEST	443	60865	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.034573078 CEST	60865	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.034699917 CEST	60865	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.034708977 CEST	443	60865	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.117528915 CEST	60858	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.117602110 CEST	443	60858	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.117927074 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:42.126650095 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:42.358989000 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:42.364151955 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:42.461446047 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:42.467154026 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:42.549038887 CEST	443	60861	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.549498081 CEST	60861	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.549546957 CEST	443	60861	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.549993992 CEST	60861	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.550008059 CEST	443	60861	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.571744919 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:42.578517914 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:42.583499908 CEST	443	60862	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.583877087 CEST	60862	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.583903074 CEST	443	60862	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.584317923 CEST	60862	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.584331036 CEST	443	60862	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.630868912 CEST	443	60863	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.631505013 CEST	60863	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.631539106 CEST	443	60863	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.632251024 CEST	60863	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.632261992 CEST	443	60863	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.680143118 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:42.683448076 CEST	443	60861	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.683512926 CEST	443	60861	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.683619022 CEST	60861	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.683876038 CEST	60861	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.683912039 CEST	443	60861	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.683933973 CEST	60861	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.683945894 CEST	443	60861	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.686631918 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:42.686986923 CEST	60866	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.687031031 CEST	443	60866	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.687096119 CEST	60866	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.687246084 CEST	60866	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.687258005 CEST	443	60866	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.726964951 CEST	443	60862	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.727030039 CEST	443	60862	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.727169991 CEST	60862	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.727252007 CEST	60862	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.727252007 CEST	60862	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.727273941 CEST	443	60862	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.727298021 CEST	443	60862	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.729782104 CEST	60867	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.729818106 CEST	443	60867	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.730029106 CEST	60867	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.730173111 CEST	60867	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.730182886 CEST	443	60867	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.761553049 CEST	443	60863	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.761748075 CEST	443	60863	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.761812925 CEST	60863	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.761908054 CEST	60863	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.761940956 CEST	443	60863	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.761969090 CEST	60863	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.761986971 CEST	443	60863	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.764590979 CEST	60868	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.764638901 CEST	443	60868	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.764714956 CEST	60868	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.764873981 CEST	60868	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.764909029 CEST	443	60868	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.767884970 CEST	443	60864	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.768261909 CEST	60864	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.768285036 CEST	443	60864	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.768676996 CEST	60864	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.768682957 CEST	443	60864	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.790030003 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:42.799479961 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:42.800965071 CEST	443	60865	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.801356077 CEST	60865	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.801388025 CEST	443	60865	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.801763058 CEST	60865	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.801769018 CEST	443	60865	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.898859024 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:42.922388077 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:42.922550917 CEST	443	60864	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.922621012 CEST	443	60864	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.922678947 CEST	60864	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.922694921 CEST	443	60864	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.922723055 CEST	443	60864	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.922785044 CEST	60864	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.922866106 CEST	60864	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.922878981 CEST	443	60864	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.922888994 CEST	60864	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.922894001 CEST	443	60864	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.925076962 CEST	60869	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.925159931 CEST	443	60869	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.925324917 CEST	60869	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.925461054 CEST	60869	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.925482035 CEST	443	60869	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.942977905 CEST	443	60865	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.943046093 CEST	443	60865	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.943109989 CEST	60865	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.943200111 CEST	60865	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.943200111 CEST	60865	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.943248987 CEST	443	60865	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.943275928 CEST	443	60865	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.945544958 CEST	60870	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.945573092 CEST	443	60870	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:42.945641994 CEST	60870	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.948842049 CEST	60870	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:42.948868990 CEST	443	60870	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.008443117 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:43.032681942 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:43.117615938 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:43.122773886 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:43.227237940 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:43.255543947 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:43.336458921 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:43.342899084 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:43.446356058 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:43.451570988 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:43.503700972 CEST	443	60867	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.504208088 CEST	443	60866	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.504730940 CEST	60867	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.504755974 CEST	443	60867	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.505345106 CEST	60867	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.505350113 CEST	443	60867	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.505636930 CEST	60866	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.505662918 CEST	443	60866	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.506196022 CEST	60866	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.506201982 CEST	443	60866	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.516123056 CEST	443	60868	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.516638994 CEST	60868	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.516724110 CEST	443	60868	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.517071009 CEST	60868	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.517080069 CEST	443	60868	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.555401087 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:43.560894966 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:43.664717913 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:43.707304001 CEST	443	60868	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.707565069 CEST	443	60868	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.707767963 CEST	60868	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.707847118 CEST	60868	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.707866907 CEST	443	60868	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.707880020 CEST	60868	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.707885981 CEST	443	60868	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.709450006 CEST	443	60867	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.709530115 CEST	443	60867	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.709599018 CEST	60867	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.709772110 CEST	60867	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.709796906 CEST	443	60867	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.709810972 CEST	60867	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.709816933 CEST	443	60867	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.709868908 CEST	443	60866	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.709902048 CEST	443	60866	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.709927082 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:43.709958076 CEST	60866	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.709963083 CEST	443	60866	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.710005999 CEST	60866	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.710571051 CEST	60866	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.710592031 CEST	443	60866	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.710607052 CEST	60866	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.710612059 CEST	443	60866	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.711447954 CEST	60871	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.711478949 CEST	443	60871	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.711555004 CEST	60871	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.712404966 CEST	60871	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.712420940 CEST	443	60871	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.712762117 CEST	60872	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.712795019 CEST	443	60872	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.713455915 CEST	60873	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.713491917 CEST	443	60873	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.713501930 CEST	60872	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.713545084 CEST	60873	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.713648081 CEST	60872	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.713670015 CEST	443	60872	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.713725090 CEST	60873	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.713736057 CEST	443	60873	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.768754005 CEST	443	60869	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.769211054 CEST	60869	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.769239902 CEST	443	60869	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.769803047 CEST	60869	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.769814968 CEST	443	60869	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.774765015 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:43.780251026 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:43.848644018 CEST	443	60870	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.849318981 CEST	60870	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.849359035 CEST	443	60870	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.850012064 CEST	60870	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.850023031 CEST	443	60870	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.883546114 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:43.914350033 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:43.920058966 CEST	443	60869	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.920128107 CEST	443	60869	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.920254946 CEST	60869	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.920540094 CEST	60869	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.920540094 CEST	60869	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.920574903 CEST	443	60869	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.920598984 CEST	443	60869	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.923664093 CEST	60874	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.923703909 CEST	443	60874	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.923787117 CEST	60874	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.923942089 CEST	60874	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:43.923955917 CEST	443	60874	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:43.992687941 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:44.008558989 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:44.051913023 CEST	443	60870	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.052037954 CEST	443	60870	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.052275896 CEST	60870	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.052350998 CEST	60870	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.052350998 CEST	60870	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.052376986 CEST	443	60870	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.052398920 CEST	443	60870	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.055659056 CEST	60875	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.055732965 CEST	443	60875	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.057120085 CEST	60875	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.057388067 CEST	60875	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.057421923 CEST	443	60875	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.102541924 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:44.119462967 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:44.211445093 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:44.238750935 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:44.320990086 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:44.348995924 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:44.430551052 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:44.445755959 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:44.539635897 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:44.540357113 CEST	443	60873	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.540908098 CEST	60873	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.540923119 CEST	443	60873	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.541373968 CEST	60873	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.541378975 CEST	443	60873	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.544456005 CEST	443	60872	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.547234058 CEST	60872	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.547257900 CEST	443	60872	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.547746897 CEST	60872	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.547753096 CEST	443	60872	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.549114943 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:44.549232006 CEST	443	60871	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.549581051 CEST	60871	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.549664021 CEST	443	60871	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.549988031 CEST	60871	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.550004005 CEST	443	60871	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.648987055 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:44.689836979 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:44.702351093 CEST	443	60873	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.702431917 CEST	443	60873	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.702493906 CEST	60873	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.710659027 CEST	60873	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.710683107 CEST	443	60873	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.710720062 CEST	60873	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.710726976 CEST	443	60873	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.714024067 CEST	60876	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.714071035 CEST	443	60876	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.714142084 CEST	60876	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.714318037 CEST	60876	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.714329958 CEST	443	60876	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.718111992 CEST	443	60872	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.718283892 CEST	443	60872	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.718358994 CEST	60872	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.718429089 CEST	60872	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.718430042 CEST	60872	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.718456984 CEST	443	60872	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.718482018 CEST	443	60872	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.720833063 CEST	60877	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.720874071 CEST	443	60877	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.720977068 CEST	60877	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.721276045 CEST	60877	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.721290112 CEST	443	60877	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.721698046 CEST	443	60871	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.721784115 CEST	443	60871	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.721848965 CEST	60871	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.721937895 CEST	60871	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.721937895 CEST	60871	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.721987009 CEST	443	60871	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.722017050 CEST	443	60871	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.724359035 CEST	60878	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.724370003 CEST	443	60878	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.724451065 CEST	60878	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.724586964 CEST	60878	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.724602938 CEST	443	60878	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.755794048 CEST	443	60874	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.756529093 CEST	60874	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.756541967 CEST	443	60874	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.757055044 CEST	60874	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.757061005 CEST	443	60874	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.758935928 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:44.767606020 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:44.861058950 CEST	443	60875	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.861582994 CEST	60875	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.861599922 CEST	443	60875	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.862169027 CEST	60875	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.862173080 CEST	443	60875	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.867705107 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:44.872798920 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:44.894453049 CEST	443	60874	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.894782066 CEST	443	60874	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.894848108 CEST	443	60874	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.894850016 CEST	60874	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.894896030 CEST	60874	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.894948959 CEST	60874	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.894967079 CEST	443	60874	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.894978046 CEST	60874	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.894984961 CEST	443	60874	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.897742987 CEST	60879	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.897794008 CEST	443	60879	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.897869110 CEST	60879	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.897985935 CEST	60879	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:44.897999048 CEST	443	60879	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:44.977217913 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:44.987509966 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:45.010418892 CEST	443	60875	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.010513067 CEST	443	60875	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.010585070 CEST	60875	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.010771036 CEST	60875	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.010806084 CEST	443	60875	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.010831118 CEST	60875	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.010844946 CEST	443	60875	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.014053106 CEST	60880	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.014173031 CEST	443	60880	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.014292002 CEST	60880	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.014466047 CEST	60880	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.014503956 CEST	443	60880	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.086599112 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:45.094367027 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:45.195940971 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:45.203766108 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:45.305205107 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:45.310372114 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:45.415115118 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:45.431905985 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:45.451683044 CEST	443	60876	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.452234983 CEST	60876	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.452258110 CEST	443	60876	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.452714920 CEST	60876	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.452719927 CEST	443	60876	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.524013996 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:45.547759056 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:45.549710989 CEST	443	60878	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.550218105 CEST	60878	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.550241947 CEST	443	60878	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.550685883 CEST	60878	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.550700903 CEST	443	60878	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.552043915 CEST	443	60877	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.552400112 CEST	60877	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.552417040 CEST	443	60877	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.552953959 CEST	60877	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.552962065 CEST	443	60877	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.579916954 CEST	443	60876	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.580012083 CEST	443	60876	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.580064058 CEST	60876	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.580212116 CEST	60876	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.580229998 CEST	443	60876	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.580238104 CEST	60876	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.580243111 CEST	443	60876	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.583151102 CEST	60881	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.583204031 CEST	443	60881	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.583276987 CEST	60881	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.583432913 CEST	60881	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.583447933 CEST	443	60881	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.633411884 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:45.661082983 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:45.691329002 CEST	443	60879	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.691884995 CEST	60879	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.691905022 CEST	443	60879	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.692363977 CEST	60879	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.692368984 CEST	443	60879	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.694217920 CEST	443	60878	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.694247961 CEST	443	60878	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.694297075 CEST	60878	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.694314957 CEST	443	60878	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.694330931 CEST	443	60878	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.694382906 CEST	60878	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.694616079 CEST	60878	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.694632053 CEST	443	60878	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.694642067 CEST	60878	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.694648027 CEST	443	60878	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.697870016 CEST	443	60877	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.698096037 CEST	443	60877	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.698162079 CEST	60877	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.698590994 CEST	60877	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.698595047 CEST	443	60877	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.698620081 CEST	60877	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.698623896 CEST	443	60877	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.700156927 CEST	60882	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.700203896 CEST	443	60882	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.700287104 CEST	60882	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.700448036 CEST	60882	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.700463057 CEST	443	60882	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.701464891 CEST	60883	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.701558113 CEST	443	60883	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.701627016 CEST	60883	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.701750040 CEST	60883	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.701787949 CEST	443	60883	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.742794991 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:45.748492002 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:45.825697899 CEST	443	60880	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.826198101 CEST	60880	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.826236010 CEST	443	60880	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.826772928 CEST	60880	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.826783895 CEST	443	60880	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.833942890 CEST	443	60879	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.834022045 CEST	443	60879	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.834062099 CEST	60879	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.834074974 CEST	443	60879	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.834129095 CEST	60879	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.834216118 CEST	60879	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.834233046 CEST	443	60879	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.834243059 CEST	60879	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.834248066 CEST	443	60879	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.837819099 CEST	60884	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.837872028 CEST	443	60884	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.837956905 CEST	60884	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.838102102 CEST	60884	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:45.838119984 CEST	443	60884	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:45.852152109 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:45.857722998 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:45.962263107 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:46.007436037 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:46.010227919 CEST	443	60880	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.012079954 CEST	443	60880	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.012149096 CEST	443	60880	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.012151003 CEST	60880	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.012203932 CEST	60880	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.012245893 CEST	60880	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.012269020 CEST	443	60880	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.012293100 CEST	60880	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.012304068 CEST	443	60880	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.014800072 CEST	60885	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.014837980 CEST	443	60885	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.014910936 CEST	60885	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.015038967 CEST	60885	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.015049934 CEST	443	60885	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.071847916 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:46.076838017 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:46.180334091 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:46.185527086 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:46.289827108 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:46.295320988 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:46.401932955 CEST	443	60881	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.416095018 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:46.416547060 CEST	60881	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.416593075 CEST	443	60881	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.417030096 CEST	60881	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.417037964 CEST	443	60881	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.439004898 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:46.523983955 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:46.536005020 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:46.558794022 CEST	443	60881	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.558953047 CEST	443	60881	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.559036016 CEST	60881	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.559159994 CEST	60881	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.559184074 CEST	443	60881	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.559199095 CEST	60881	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.559206009 CEST	443	60881	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.562381983 CEST	60886	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.562413931 CEST	443	60886	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.562495947 CEST	60886	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.562665939 CEST	60886	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.562675953 CEST	443	60886	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.567697048 CEST	443	60882	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.567729950 CEST	443	60883	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.568034887 CEST	60882	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.568054914 CEST	443	60882	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.568191051 CEST	60883	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.568228006 CEST	443	60883	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.568489075 CEST	60882	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.568495035 CEST	443	60882	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.568761110 CEST	60883	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.568778038 CEST	443	60883	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.633352041 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:46.681761026 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:46.743294001 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:46.754643917 CEST	443	60884	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.755388975 CEST	60884	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.755424976 CEST	443	60884	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.755839109 CEST	60884	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.755845070 CEST	443	60884	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.756151915 CEST	443	60883	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.756242037 CEST	443	60883	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.756306887 CEST	60883	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.756550074 CEST	60883	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.756571054 CEST	443	60883	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.756602049 CEST	60883	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.756611109 CEST	443	60883	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.757730007 CEST	443	60882	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.757780075 CEST	443	60882	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.757838011 CEST	60882	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.757874012 CEST	443	60882	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.757890940 CEST	443	60882	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.757961035 CEST	60882	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.758055925 CEST	60882	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.758069038 CEST	443	60882	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.758083105 CEST	60882	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.758089066 CEST	443	60882	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.761533976 CEST	60887	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.761569977 CEST	443	60887	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.761646032 CEST	60887	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.763204098 CEST	60888	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.763242006 CEST	443	60888	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.763304949 CEST	60888	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.763362885 CEST	60887	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.763401985 CEST	443	60887	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.763456106 CEST	60888	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.763468981 CEST	443	60888	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.767510891 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:46.852212906 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:46.877036095 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:46.954209089 CEST	443	60885	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.954622984 CEST	60885	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.954649925 CEST	443	60885	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.955055952 CEST	60885	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.955064058 CEST	443	60885	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.961505890 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:46.962785006 CEST	443	60884	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.962820053 CEST	443	60884	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.962881088 CEST	60884	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.962888956 CEST	443	60884	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.962973118 CEST	60884	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.963124037 CEST	60884	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.963146925 CEST	443	60884	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.963161945 CEST	60884	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.963169098 CEST	443	60884	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.965835094 CEST	60889	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.965874910 CEST	443	60889	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.965925932 CEST	60889	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.966090918 CEST	60889	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:46.966109037 CEST	443	60889	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:46.976558924 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:47.070847034 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:47.076164961 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:47.103753090 CEST	443	60885	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.103780985 CEST	443	60885	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.103826046 CEST	443	60885	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.103930950 CEST	60885	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:47.103969097 CEST	60885	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:47.104546070 CEST	60885	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:47.104546070 CEST	60885	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:47.104557991 CEST	443	60885	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.104582071 CEST	443	60885	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.116624117 CEST	60890	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:47.116667986 CEST	443	60890	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.116755962 CEST	60890	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:47.117089033 CEST	60890	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:47.117101908 CEST	443	60890	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.180181980 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:47.187414885 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:47.289691925 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:47.294748068 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:47.399614096 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:47.433831930 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:47.443036079 CEST	443	60886	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.443578005 CEST	60886	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:47.443613052 CEST	443	60886	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.444057941 CEST	60886	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:47.444082022 CEST	443	60886	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.508383989 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:47.531476974 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:47.586149931 CEST	443	60888	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.587171078 CEST	60888	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:47.587197065 CEST	443	60888	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.587758064 CEST	60888	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:47.587765932 CEST	443	60888	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.590893030 CEST	443	60887	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.591288090 CEST	60887	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:47.591296911 CEST	443	60887	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.591762066 CEST	60887	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:47.591766119 CEST	443	60887	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.593170881 CEST	443	60886	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.593374014 CEST	443	60886	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.593435049 CEST	443	60886	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.593436003 CEST	60886	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:47.593512058 CEST	60886	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:47.593563080 CEST	60886	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:47.593580008 CEST	443	60886	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.593592882 CEST	60886	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:47.593599081 CEST	443	60886	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.596718073 CEST	60891	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:47.596752882 CEST	443	60891	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.596839905 CEST	60891	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:47.597029924 CEST	60891	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:47.597047091 CEST	443	60891	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:47.617741108 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:47.632729053 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:47.727193117 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:47.961282969 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:48.014933109 CEST	443	60888	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.015018940 CEST	443	60888	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.015108109 CEST	60888	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.015311956 CEST	60888	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.015336037 CEST	443	60888	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.015361071 CEST	60888	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.015367031 CEST	443	60888	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.018385887 CEST	60892	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.018440008 CEST	443	60892	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.018521070 CEST	60892	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.018704891 CEST	60892	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.018723011 CEST	443	60892	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.019572973 CEST	443	60887	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.019643068 CEST	443	60887	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.019685030 CEST	60887	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.019772053 CEST	60887	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.019781113 CEST	443	60887	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.019793034 CEST	60887	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.019798040 CEST	443	60887	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.019893885 CEST	443	60889	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.020250082 CEST	60889	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.020277023 CEST	443	60889	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.020653009 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:48.020667076 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:48.020714998 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:48.020870924 CEST	60889	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.020875931 CEST	443	60889	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.022183895 CEST	60893	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.022208929 CEST	443	60893	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.022274971 CEST	60893	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.022409916 CEST	60893	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.022423029 CEST	443	60893	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.025553942 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:48.055828094 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:48.060977936 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:48.157172918 CEST	443	60890	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.158039093 CEST	60890	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.158065081 CEST	443	60890	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.158626080 CEST	60890	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.158634901 CEST	443	60890	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.158967972 CEST	443	60889	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.159055948 CEST	443	60889	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.159101963 CEST	60889	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.159210920 CEST	60889	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.159226894 CEST	443	60889	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.159236908 CEST	60889	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.159241915 CEST	443	60889	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.162590981 CEST	60894	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.162615061 CEST	443	60894	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.162692070 CEST	60894	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.162878036 CEST	60894	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.162887096 CEST	443	60894	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.165818930 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:48.202088118 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:48.274106026 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:48.314155102 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:48.353488922 CEST	443	60890	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.353529930 CEST	443	60890	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.353745937 CEST	60890	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.353770971 CEST	443	60890	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.353861094 CEST	60890	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.353871107 CEST	443	60890	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.353882074 CEST	60890	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.354561090 CEST	443	60890	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.356807947 CEST	60895	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.356822968 CEST	443	60895	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.356906891 CEST	60895	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.357105970 CEST	60895	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.357115984 CEST	443	60895	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.383456945 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:48.391290903 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:48.461266041 CEST	443	60891	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.461968899 CEST	60891	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.461991072 CEST	443	60891	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.462567091 CEST	60891	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.462574959 CEST	443	60891	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.492839098 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:48.500231981 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:48.532953024 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:48.533094883 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:48.602296114 CEST	60851	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:48.621284008 CEST	443	60891	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.621361017 CEST	443	60891	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.621452093 CEST	60891	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.621743917 CEST	60891	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.621767044 CEST	443	60891	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.621809006 CEST	60891	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.621815920 CEST	443	60891	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.627409935 CEST	60896	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.627459049 CEST	443	60896	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.627525091 CEST	60896	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.627720118 CEST	60896	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:48.627734900 CEST	443	60896	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:48.656501055 CEST	15647	60851	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:48.711764097 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:48.716953039 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:48.717097044 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:48.717545033 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:48.722670078 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:48.821311951 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:49.133238077 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:49.146363974 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:49.146406889 CEST	443	60893	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.146914959 CEST	60893	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.146927118 CEST	443	60893	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.147253990 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:49.147510052 CEST	60893	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.147515059 CEST	443	60893	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.149086952 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:49.150274038 CEST	443	60892	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.150665998 CEST	60892	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.150681019 CEST	443	60892	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.151185036 CEST	60892	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.151190996 CEST	443	60892	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.154007912 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:49.258389950 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:49.308274031 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:49.322571993 CEST	443	60894	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.323091984 CEST	60894	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.323102951 CEST	443	60894	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.323678017 CEST	60894	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.323682070 CEST	443	60894	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.326778889 CEST	443	60895	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.327125072 CEST	60895	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.327132940 CEST	443	60895	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.327600002 CEST	60895	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.327605009 CEST	443	60895	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.332298994 CEST	443	60893	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.332361937 CEST	443	60893	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.332412958 CEST	60893	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.332612038 CEST	60893	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.332618952 CEST	443	60893	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.332637072 CEST	60893	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.332642078 CEST	443	60893	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.334918976 CEST	443	60892	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.334995985 CEST	443	60892	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.335046053 CEST	60892	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.335055113 CEST	443	60892	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.335099936 CEST	443	60892	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.335140944 CEST	60892	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.335227013 CEST	60892	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.335241079 CEST	443	60892	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.335251093 CEST	60892	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.335257053 CEST	443	60892	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.335747004 CEST	60898	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.335758924 CEST	443	60898	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.335824013 CEST	60898	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.335969925 CEST	60898	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.335980892 CEST	443	60898	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.337656021 CEST	60899	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.337677956 CEST	443	60899	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.337735891 CEST	60899	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.337860107 CEST	60899	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.337871075 CEST	443	60899	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.367796898 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:49.374878883 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:49.479152918 CEST	443	60895	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.479667902 CEST	443	60896	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.480217934 CEST	443	60895	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.480240107 CEST	443	60894	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.480281115 CEST	443	60894	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.480292082 CEST	60895	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.480340004 CEST	443	60894	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.480345964 CEST	60894	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.480371952 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:49.480390072 CEST	60894	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.480843067 CEST	60895	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.480849028 CEST	443	60895	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.480861902 CEST	60895	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.480865955 CEST	443	60895	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.482301950 CEST	60896	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.482309103 CEST	443	60896	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.482738972 CEST	60896	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.482742071 CEST	443	60896	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.482863903 CEST	60894	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.482876062 CEST	443	60894	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.482886076 CEST	60894	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.482892036 CEST	443	60894	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.486257076 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:49.486294031 CEST	60900	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.486318111 CEST	443	60900	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.486394882 CEST	60900	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.487143993 CEST	60901	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.487175941 CEST	443	60901	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.487241983 CEST	60901	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.487411022 CEST	60900	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.487421036 CEST	443	60900	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.487567902 CEST	60901	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.487587929 CEST	443	60901	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.586500883 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:49.592412949 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:49.613610983 CEST	443	60896	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.613672972 CEST	443	60896	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.613744020 CEST	60896	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.613979101 CEST	60896	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.614002943 CEST	443	60896	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.614015102 CEST	60896	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.614022970 CEST	443	60896	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.617010117 CEST	60902	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.617067099 CEST	443	60902	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.617157936 CEST	60902	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.617332935 CEST	60902	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:49.617341042 CEST	443	60902	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:49.695913076 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:49.739995003 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:49.805295944 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:49.812895060 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:49.914715052 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:49.921336889 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:50.024010897 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:50.046432972 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:50.134172916 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:50.139180899 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:50.172295094 CEST	443	60898	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.172802925 CEST	60898	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.172828913 CEST	443	60898	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.173259020 CEST	60898	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.173270941 CEST	443	60898	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.175117970 CEST	443	60899	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.175451994 CEST	60899	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.175472975 CEST	443	60899	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.175847054 CEST	60899	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.175854921 CEST	443	60899	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.242783070 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:50.257927895 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:50.352083921 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:50.362786055 CEST	443	60901	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.363267899 CEST	60901	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.363287926 CEST	443	60901	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.363735914 CEST	60901	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.363742113 CEST	443	60901	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.363881111 CEST	443	60898	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.363950968 CEST	443	60898	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.363996029 CEST	60898	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.364105940 CEST	60898	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.364120960 CEST	443	60898	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.364130974 CEST	60898	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.364135981 CEST	443	60898	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.364734888 CEST	443	60899	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.364875078 CEST	443	60899	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.364927053 CEST	60899	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.365173101 CEST	60899	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.365196943 CEST	443	60899	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.365211964 CEST	60899	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.365220070 CEST	443	60899	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.365386963 CEST	443	60900	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.365741968 CEST	60900	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.365758896 CEST	443	60900	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.366156101 CEST	60900	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.366162062 CEST	443	60900	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.367552042 CEST	60903	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.367599010 CEST	443	60903	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.367655993 CEST	60903	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.367768049 CEST	60904	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.367791891 CEST	60903	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.367809057 CEST	443	60904	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.367810011 CEST	443	60903	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.367872000 CEST	60904	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.367966890 CEST	60904	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.367984056 CEST	443	60904	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.392921925 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:50.461507082 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:50.467550993 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:50.546646118 CEST	443	60902	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.547097921 CEST	443	60901	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.547121048 CEST	60902	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.547156096 CEST	443	60902	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.547333956 CEST	443	60901	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.547416925 CEST	60901	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.547557116 CEST	60902	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.547566891 CEST	443	60902	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.547713995 CEST	60901	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.547719002 CEST	443	60900	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.547734976 CEST	443	60901	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.547749043 CEST	60901	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.547755003 CEST	443	60900	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.547756910 CEST	443	60901	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.547811031 CEST	443	60900	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.547811985 CEST	60900	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.547853947 CEST	60900	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.548721075 CEST	60900	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.548728943 CEST	443	60900	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.548741102 CEST	60900	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.548747063 CEST	443	60900	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.551249027 CEST	60905	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.551282883 CEST	443	60905	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.551351070 CEST	60905	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.551779985 CEST	60906	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.551788092 CEST	443	60906	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.551839113 CEST	60906	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.551897049 CEST	60905	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.551907063 CEST	443	60905	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.551981926 CEST	60906	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.551991940 CEST	443	60906	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.570812941 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:50.576056957 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:50.680253983 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:50.691955090 CEST	443	60902	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.692030907 CEST	443	60902	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.692085028 CEST	60902	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.692224026 CEST	60902	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.692249060 CEST	443	60902	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.692262888 CEST	60902	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.692270041 CEST	443	60902	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.694673061 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:50.695211887 CEST	60907	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.695252895 CEST	443	60907	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.695329905 CEST	60907	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.695476055 CEST	60907	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:50.695493937 CEST	443	60907	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:50.790100098 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:50.795222998 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:50.899123907 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:50.948149920 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:51.008270979 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:51.013427019 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:51.118088007 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:51.151534081 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:51.218215942 CEST	443	60903	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.218676090 CEST	60903	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.218710899 CEST	443	60903	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.219156981 CEST	60903	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.219162941 CEST	443	60903	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.225909948 CEST	443	60904	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.226361036 CEST	60904	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.226387024 CEST	443	60904	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.226775885 CEST	60904	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.226782084 CEST	443	60904	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.227257967 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:51.232645035 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:51.336435080 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:51.337536097 CEST	443	60906	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.338031054 CEST	60906	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.338047981 CEST	443	60906	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.338567972 CEST	60906	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.338573933 CEST	443	60906	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.346597910 CEST	443	60905	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.346924067 CEST	60905	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.346930981 CEST	443	60905	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.347294092 CEST	60905	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.347297907 CEST	443	60905	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.352766037 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:51.366625071 CEST	443	60904	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.366767883 CEST	443	60904	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.366853952 CEST	60904	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.366965055 CEST	60904	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.366988897 CEST	443	60904	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.367002964 CEST	60904	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.367011070 CEST	443	60904	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.369813919 CEST	60908	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.369863987 CEST	443	60908	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.369954109 CEST	60908	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.370104074 CEST	60908	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.370125055 CEST	443	60908	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.373677969 CEST	443	60903	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.373717070 CEST	443	60903	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.373769045 CEST	443	60903	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.373771906 CEST	60903	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.373812914 CEST	60903	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.373873949 CEST	60903	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.373898029 CEST	443	60903	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.373913050 CEST	60903	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.373923063 CEST	443	60903	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.375765085 CEST	60909	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.375790119 CEST	443	60909	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.375861883 CEST	60909	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.375971079 CEST	60909	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.375984907 CEST	443	60909	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.446333885 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:51.468413115 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:51.469465971 CEST	443	60907	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.469953060 CEST	60907	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.469974995 CEST	443	60907	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.470479965 CEST	60907	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.470487118 CEST	443	60907	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.507800102 CEST	443	60905	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.507874012 CEST	443	60905	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.507927895 CEST	60905	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.508162022 CEST	60905	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.508176088 CEST	443	60905	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.508186102 CEST	60905	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.508192062 CEST	443	60905	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.512093067 CEST	60910	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.512110949 CEST	443	60910	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.512278080 CEST	60910	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.512747049 CEST	60910	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.512758017 CEST	443	60910	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.555174112 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:51.577209949 CEST	443	60906	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.577250004 CEST	443	60906	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.577311993 CEST	443	60906	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.577321053 CEST	60906	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.577354908 CEST	60906	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.577495098 CEST	60906	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.577517033 CEST	443	60906	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.577532053 CEST	60906	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.577538013 CEST	443	60906	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.579978943 CEST	60911	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.580025911 CEST	443	60911	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.580106020 CEST	60911	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.580223083 CEST	60911	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.580240965 CEST	443	60911	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.582151890 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:51.629467964 CEST	443	60907	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.629502058 CEST	443	60907	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.629564047 CEST	443	60907	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.629630089 CEST	60907	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.629899979 CEST	60907	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.629899979 CEST	60907	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.632451057 CEST	60907	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.632477045 CEST	443	60907	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.632893085 CEST	60912	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.632950068 CEST	443	60912	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.633024931 CEST	60912	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.633307934 CEST	60912	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:51.633327961 CEST	443	60912	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:51.664586067 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:51.676398039 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:51.773945093 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:51.779767036 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:51.884586096 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:51.912164927 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:51.992677927 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:52.000317097 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:52.102524996 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:52.107558966 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:52.150099039 CEST	443	60908	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.150602102 CEST	60908	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.150659084 CEST	443	60908	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.151050091 CEST	60908	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.151063919 CEST	443	60908	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.211430073 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:52.219616890 CEST	443	60909	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.220110893 CEST	60909	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.220139027 CEST	443	60909	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.220555067 CEST	60909	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.220560074 CEST	443	60909	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.229904890 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:52.302061081 CEST	443	60908	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.302229881 CEST	443	60908	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.302424908 CEST	60908	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.302517891 CEST	60908	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.302517891 CEST	60908	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.302565098 CEST	443	60908	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.302592993 CEST	443	60908	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.305346966 CEST	60913	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.305402040 CEST	443	60913	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.305470943 CEST	60913	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.305629015 CEST	60913	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.305645943 CEST	443	60913	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.320838928 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:52.325898886 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:52.346296072 CEST	443	60910	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.346901894 CEST	60910	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.346925974 CEST	443	60910	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.347316980 CEST	60910	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.347323895 CEST	443	60910	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.375653028 CEST	443	60911	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.376203060 CEST	60911	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.376230001 CEST	443	60911	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.376550913 CEST	60911	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.376559973 CEST	443	60911	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.401165009 CEST	443	60909	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.401185989 CEST	443	60909	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.401318073 CEST	60909	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.401350975 CEST	443	60909	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.401623011 CEST	60909	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.401643991 CEST	443	60909	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.401669979 CEST	60909	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.401801109 CEST	443	60909	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.401844025 CEST	443	60909	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.401900053 CEST	60909	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.402726889 CEST	443	60912	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.404431105 CEST	60914	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.404467106 CEST	443	60914	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.404818058 CEST	60912	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.404851913 CEST	443	60912	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.404854059 CEST	60914	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.404973984 CEST	60914	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.404989004 CEST	443	60914	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.405220032 CEST	60912	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.405226946 CEST	443	60912	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.430258036 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:52.438071966 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:52.477442026 CEST	443	60910	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.477468967 CEST	443	60910	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.477529049 CEST	443	60910	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.477606058 CEST	60910	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.477708101 CEST	60910	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.477956057 CEST	60910	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.477977991 CEST	443	60910	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.477993011 CEST	60910	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.477998972 CEST	443	60910	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.481110096 CEST	60915	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.481148005 CEST	443	60915	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.481251955 CEST	60915	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.481420040 CEST	60915	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.481431961 CEST	443	60915	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.508132935 CEST	443	60911	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.508182049 CEST	443	60911	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.508263111 CEST	443	60911	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.508343935 CEST	60911	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.508378983 CEST	60911	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.508939028 CEST	60911	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.508958101 CEST	443	60911	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.509001970 CEST	60911	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.509010077 CEST	443	60911	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.511591911 CEST	60916	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.511626959 CEST	443	60916	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.512492895 CEST	60916	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.512629032 CEST	60916	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.512650013 CEST	443	60916	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.539701939 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:52.545485973 CEST	443	60912	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.545574903 CEST	443	60912	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.545857906 CEST	60912	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.545887947 CEST	60912	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.545902967 CEST	443	60912	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.545937061 CEST	60912	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.545943022 CEST	443	60912	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.546670914 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:52.548682928 CEST	60917	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.548751116 CEST	443	60917	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.548846960 CEST	60917	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.549014091 CEST	60917	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:52.549031019 CEST	443	60917	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:52.649029970 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:52.654372931 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:52.758773088 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:52.764010906 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:52.867662907 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:52.872792006 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:52.977217913 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:52.982398987 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:53.044076920 CEST	443	60913	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.044776917 CEST	60913	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.044807911 CEST	443	60913	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.045265913 CEST	60913	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.045272112 CEST	443	60913	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.086472988 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:53.091546059 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:53.149549961 CEST	443	60914	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.150465965 CEST	60914	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.150465965 CEST	60914	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.150479078 CEST	443	60914	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.150495052 CEST	443	60914	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.175915956 CEST	443	60913	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.178250074 CEST	443	60913	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.178304911 CEST	60913	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.178320885 CEST	443	60913	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.178373098 CEST	443	60913	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.178420067 CEST	60913	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.178447962 CEST	60913	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.178471088 CEST	443	60913	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.178479910 CEST	60913	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.178486109 CEST	443	60913	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.181443930 CEST	60918	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.181479931 CEST	443	60918	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.181538105 CEST	60918	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.181751966 CEST	60918	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.181765079 CEST	443	60918	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.195806980 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:53.200926065 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:53.251179934 CEST	443	60916	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.251631021 CEST	60916	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.251647949 CEST	443	60916	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.252019882 CEST	443	60915	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.252130032 CEST	60916	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.252135992 CEST	443	60916	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.252418041 CEST	60915	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.252468109 CEST	443	60915	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.252826929 CEST	60915	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.252839088 CEST	443	60915	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.280447006 CEST	443	60914	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.280657053 CEST	443	60914	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.280806065 CEST	60914	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.280806065 CEST	60914	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.280838013 CEST	60914	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.280864000 CEST	443	60914	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.283762932 CEST	60919	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.283806086 CEST	443	60919	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.283880949 CEST	60919	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.284066916 CEST	60919	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.284085989 CEST	443	60919	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.297344923 CEST	443	60917	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.302074909 CEST	60917	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.302086115 CEST	443	60917	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.302541971 CEST	60917	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.302546978 CEST	443	60917	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.305192947 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:53.310029984 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:53.377532005 CEST	443	60916	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.377743006 CEST	443	60916	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.377835035 CEST	60916	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.377928972 CEST	60916	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.377945900 CEST	443	60916	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.377957106 CEST	60916	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.377964020 CEST	443	60916	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.381068945 CEST	60920	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.381118059 CEST	443	60920	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.381205082 CEST	60920	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.381424904 CEST	60920	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.381436110 CEST	443	60920	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.382503986 CEST	443	60915	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.382663012 CEST	443	60915	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.382705927 CEST	443	60915	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.382709980 CEST	60915	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.382750988 CEST	60915	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.382790089 CEST	60915	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.382808924 CEST	443	60915	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.382822037 CEST	60915	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.382827044 CEST	443	60915	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.385116100 CEST	60921	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.385164976 CEST	443	60921	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.385246992 CEST	60921	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.385375023 CEST	60921	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.385395050 CEST	443	60921	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.414983988 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:53.420006990 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:53.431018114 CEST	443	60917	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.431054115 CEST	443	60917	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.431106091 CEST	443	60917	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.431128025 CEST	60917	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.431159973 CEST	60917	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.431406975 CEST	60917	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.431427956 CEST	443	60917	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.431442022 CEST	60917	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.431447983 CEST	443	60917	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.434390068 CEST	60922	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.434446096 CEST	443	60922	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.434539080 CEST	60922	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.434722900 CEST	60922	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.434740067 CEST	443	60922	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.524055004 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:53.533322096 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:53.633323908 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:53.638232946 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:53.742714882 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:53.747791052 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:53.852089882 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:53.857459068 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:53.944350958 CEST	443	60918	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.944937944 CEST	60918	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.944968939 CEST	443	60918	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.945307970 CEST	60918	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:53.945313931 CEST	443	60918	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:53.961581945 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:53.979446888 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:54.014205933 CEST	443	60919	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.014810085 CEST	60919	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.014843941 CEST	443	60919	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.015288115 CEST	60919	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.015294075 CEST	443	60919	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.071362019 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:54.076683998 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:54.078176975 CEST	443	60918	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.078258038 CEST	443	60918	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.078332901 CEST	60918	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.078491926 CEST	60918	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.078507900 CEST	443	60918	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.078521013 CEST	60918	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.078527927 CEST	443	60918	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.081131935 CEST	60923	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.081171989 CEST	443	60923	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.081247091 CEST	60923	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.081389904 CEST	60923	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.081399918 CEST	443	60923	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.111289978 CEST	443	60921	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.111720085 CEST	60921	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.111757040 CEST	443	60921	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.112179041 CEST	60921	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.112186909 CEST	443	60921	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.116399050 CEST	443	60920	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.116758108 CEST	60920	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.116775990 CEST	443	60920	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.117122889 CEST	60920	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.117126942 CEST	443	60920	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.153994083 CEST	443	60919	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.154593945 CEST	443	60919	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.154635906 CEST	60919	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.154643059 CEST	443	60919	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.154737949 CEST	60919	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.154737949 CEST	60919	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.154759884 CEST	60919	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.154774904 CEST	443	60919	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.157294035 CEST	60924	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.157325029 CEST	443	60924	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.157385111 CEST	60924	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.157517910 CEST	60924	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.157530069 CEST	443	60924	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.180325031 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:54.194211006 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:54.246478081 CEST	443	60921	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.246539116 CEST	443	60921	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.246598959 CEST	60921	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.246743917 CEST	60921	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.246773005 CEST	443	60921	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.246792078 CEST	60921	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.246802092 CEST	443	60921	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.249269009 CEST	60925	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.249314070 CEST	443	60925	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.249370098 CEST	60925	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.249514103 CEST	60925	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.249526024 CEST	443	60925	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.252798080 CEST	443	60920	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.252851009 CEST	443	60920	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.252891064 CEST	60920	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.252979040 CEST	60920	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.252995014 CEST	443	60920	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.253005981 CEST	60920	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.253010988 CEST	443	60920	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.254976034 CEST	60926	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.254983902 CEST	443	60926	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.255055904 CEST	60926	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.255182028 CEST	60926	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.255191088 CEST	443	60926	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.289489031 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:54.295614004 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:54.398893118 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:54.408276081 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:54.508281946 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:54.537170887 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:54.617687941 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:54.646961927 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:54.728075981 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:54.733536959 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:54.836577892 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:54.846374989 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:54.923511028 CEST	443	60924	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.926047087 CEST	443	60923	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.934376955 CEST	60924	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.934405088 CEST	443	60924	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.934819937 CEST	60924	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.934827089 CEST	443	60924	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.935022116 CEST	60923	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.935046911 CEST	443	60923	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.935345888 CEST	60923	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:54.935349941 CEST	443	60923	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:54.963306904 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:54.968311071 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:55.042151928 CEST	443	60925	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.059278965 CEST	443	60926	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.060146093 CEST	443	60924	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.060796022 CEST	443	60924	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.060807943 CEST	443	60923	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.060872078 CEST	443	60923	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.060880899 CEST	60924	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.061014891 CEST	60923	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.080241919 CEST	60925	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.080262899 CEST	443	60925	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.087995052 CEST	60925	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.088001966 CEST	443	60925	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.095207930 CEST	60926	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.095218897 CEST	443	60926	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.099267006 CEST	60926	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.099286079 CEST	443	60926	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.099323034 CEST	60924	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.099364042 CEST	443	60924	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.099380016 CEST	60924	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.099391937 CEST	443	60924	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.121455908 CEST	60923	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.121455908 CEST	60923	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.121490955 CEST	443	60923	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.121522903 CEST	443	60923	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.162580013 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:55.167475939 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:55.192342043 CEST	60927	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.192375898 CEST	443	60927	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.192434072 CEST	60927	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.194022894 CEST	60928	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.194055080 CEST	443	60928	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.194102049 CEST	60928	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.194428921 CEST	60927	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.194447041 CEST	443	60927	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.194521904 CEST	60928	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.194535017 CEST	443	60928	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.212755919 CEST	443	60925	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.212784052 CEST	443	60925	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.212822914 CEST	443	60925	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.212831020 CEST	60925	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.212863922 CEST	60925	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.212975025 CEST	443	60922	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.226910114 CEST	443	60926	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.226964951 CEST	443	60926	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.227015018 CEST	60926	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.231628895 CEST	60925	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.231647015 CEST	443	60925	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.231659889 CEST	60925	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.231664896 CEST	443	60925	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.239181995 CEST	60922	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.239248991 CEST	443	60922	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.240308046 CEST	60922	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.240324020 CEST	443	60922	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.240487099 CEST	60926	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.240492105 CEST	443	60926	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.240502119 CEST	60926	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.240504980 CEST	443	60926	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.243978024 CEST	60929	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.244010925 CEST	443	60929	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.244095087 CEST	60929	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.244364023 CEST	60929	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.244375944 CEST	443	60929	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.244666100 CEST	60930	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.244673967 CEST	443	60930	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.244724989 CEST	60930	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.244837999 CEST	60930	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.244847059 CEST	443	60930	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.274040937 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:55.279097080 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:55.365511894 CEST	443	60922	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.365540028 CEST	443	60922	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.365591049 CEST	443	60922	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.365597010 CEST	60922	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.365643978 CEST	60922	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.365889072 CEST	60922	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.365895033 CEST	443	60922	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.365909100 CEST	60922	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.365914106 CEST	443	60922	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.369010925 CEST	60931	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.369046926 CEST	443	60931	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.369127035 CEST	60931	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.369256020 CEST	60931	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.369266033 CEST	443	60931	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.383320093 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:55.388356924 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:55.493252039 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:55.498209953 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:55.602111101 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:55.607129097 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:55.711707115 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:55.719258070 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:55.821460009 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:55.826636076 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:55.922100067 CEST	443	60928	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.922688961 CEST	60928	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.922710896 CEST	443	60928	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.923134089 CEST	60928	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.923140049 CEST	443	60928	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.930948019 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:55.935337067 CEST	443	60927	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.935715914 CEST	60927	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.935743093 CEST	443	60927	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.935992002 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:55.936109066 CEST	60927	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.936115026 CEST	443	60927	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.975213051 CEST	443	60929	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.975971937 CEST	60929	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.975991011 CEST	443	60929	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.976454973 CEST	60929	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.976459980 CEST	443	60929	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.996140957 CEST	443	60930	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.996530056 CEST	60930	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.996539116 CEST	443	60930	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:55.996978998 CEST	60930	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:55.996983051 CEST	443	60930	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.040045023 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:56.045083046 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:56.064378023 CEST	443	60928	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.064502954 CEST	443	60928	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.064553976 CEST	60928	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.064557076 CEST	443	60928	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.064609051 CEST	60928	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.064784050 CEST	60928	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.064798117 CEST	443	60928	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.064810038 CEST	60928	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.064821005 CEST	443	60928	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.066860914 CEST	443	60927	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.067032099 CEST	443	60927	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.067082882 CEST	60927	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.067326069 CEST	60927	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.067343950 CEST	443	60927	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.067368984 CEST	60927	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.067375898 CEST	443	60927	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.068140030 CEST	60932	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.068171024 CEST	443	60932	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.068236113 CEST	60932	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.068391085 CEST	60932	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.068404913 CEST	443	60932	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.069605112 CEST	60933	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.069653988 CEST	443	60933	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.069722891 CEST	60933	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.069859982 CEST	60933	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.069873095 CEST	443	60933	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.105730057 CEST	443	60929	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.105933905 CEST	443	60929	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.105974913 CEST	443	60929	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.105995893 CEST	60929	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.106030941 CEST	60929	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.106076002 CEST	60929	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.106097937 CEST	443	60929	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.106112957 CEST	60929	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.106120110 CEST	443	60929	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.107966900 CEST	60934	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.108006001 CEST	443	60934	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.108082056 CEST	60934	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.108323097 CEST	60934	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.108339071 CEST	443	60934	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.117762089 CEST	443	60931	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.118159056 CEST	60931	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.118165970 CEST	443	60931	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.118607044 CEST	60931	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.118611097 CEST	443	60931	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.129745007 CEST	443	60930	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.129947901 CEST	443	60930	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.130012035 CEST	60930	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.130053997 CEST	60930	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.130074978 CEST	443	60930	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.130089998 CEST	60930	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.130098104 CEST	443	60930	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.131840944 CEST	60935	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.131877899 CEST	443	60935	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.131946087 CEST	60935	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.132052898 CEST	60935	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.132067919 CEST	443	60935	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.149476051 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:56.154447079 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:56.250540018 CEST	443	60931	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.250680923 CEST	443	60931	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.250731945 CEST	60931	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.250905037 CEST	60931	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.250924110 CEST	443	60931	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.250933886 CEST	60931	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.250940084 CEST	443	60931	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.254132032 CEST	60936	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.254220009 CEST	443	60936	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.254304886 CEST	60936	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.254493952 CEST	60936	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.254530907 CEST	443	60936	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.258428097 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:56.263405085 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:56.368141890 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:56.373156071 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:56.477150917 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:56.482335091 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:56.586945057 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:56.592247009 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:56.696029902 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:56.701113939 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:56.793454885 CEST	443	60932	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.793865919 CEST	60932	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.793889046 CEST	443	60932	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.794325113 CEST	60932	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.794331074 CEST	443	60932	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.805668116 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:56.811491966 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:56.818067074 CEST	443	60933	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.818459034 CEST	60933	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.818526030 CEST	443	60933	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.818871975 CEST	60933	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.818887949 CEST	443	60933	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.861149073 CEST	443	60935	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.861505032 CEST	60935	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.861531019 CEST	443	60935	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.861882925 CEST	60935	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.861888885 CEST	443	60935	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.863507986 CEST	443	60934	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.863823891 CEST	60934	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.863850117 CEST	443	60934	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.864197016 CEST	60934	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.864228010 CEST	443	60934	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.914627075 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:56.920031071 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:56.922003984 CEST	443	60932	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.922149897 CEST	443	60932	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.922209024 CEST	60932	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.922283888 CEST	60932	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.922302961 CEST	443	60932	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.922328949 CEST	60932	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.922334909 CEST	443	60932	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.924918890 CEST	60937	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.925014973 CEST	443	60937	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.925107956 CEST	60937	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.925266027 CEST	60937	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.925295115 CEST	443	60937	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.950839043 CEST	443	60933	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.951028109 CEST	443	60933	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.951066017 CEST	443	60933	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.951141119 CEST	60933	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.951232910 CEST	60933	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.951232910 CEST	60933	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.952445984 CEST	60933	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.952469110 CEST	443	60933	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.953502893 CEST	60938	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.953536034 CEST	443	60938	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.953607082 CEST	60938	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.953769922 CEST	60938	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.953797102 CEST	443	60938	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.984801054 CEST	443	60936	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.985193968 CEST	60936	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.985215902 CEST	443	60936	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.985790014 CEST	60936	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.985795975 CEST	443	60936	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.991436958 CEST	443	60935	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.991575003 CEST	443	60935	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.991617918 CEST	60935	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.991628885 CEST	443	60935	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.991678953 CEST	60935	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.991717100 CEST	60935	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.991735935 CEST	443	60935	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.991748095 CEST	60935	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.991754055 CEST	443	60935	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.994215012 CEST	60939	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.994240046 CEST	443	60939	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.994319916 CEST	60939	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.994425058 CEST	60939	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.994436979 CEST	443	60939	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.996229887 CEST	443	60934	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.996362925 CEST	443	60934	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.996416092 CEST	60934	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.996438980 CEST	60934	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.996447086 CEST	443	60934	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.996464968 CEST	60934	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.996471882 CEST	443	60934	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.998836040 CEST	60940	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.998858929 CEST	443	60940	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:56.998909950 CEST	60940	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.998997927 CEST	60940	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:56.999011040 CEST	443	60940	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:57.024137020 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:57.029123068 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:57.113867044 CEST	443	60936	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:57.113990068 CEST	443	60936	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:57.114084959 CEST	60936	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:57.114213943 CEST	60936	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:57.114258051 CEST	443	60936	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:57.114308119 CEST	60936	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:57.114340067 CEST	443	60936	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:57.116765976 CEST	60941	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:57.116796017 CEST	443	60941	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:57.116867065 CEST	60941	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:57.116998911 CEST	60941	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:57.117006063 CEST	443	60941	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:57.133455038 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:57.138387918 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:57.222218990 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:57.222292900 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:57.246368885 CEST	60897	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:57.251441956 CEST	15647	60897	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:57.352634907 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:57.357532978 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:57.357678890 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:57.357891083 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:57.362869024 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:57.473119020 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:57.478152037 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:57.661545992 CEST	443	60937	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:57.713329077 CEST	60937	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:57.847733021 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:57.848097086 CEST	60937	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:57.848131895 CEST	443	60937	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:57.848512888 CEST	60937	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:57.848519087 CEST	443	60937	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.017786980 CEST	443	60938	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.018354893 CEST	60938	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.018381119 CEST	443	60938	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.018814087 CEST	60938	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.018819094 CEST	443	60938	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.023379087 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:58.023410082 CEST	443	60940	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.023468971 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:58.023578882 CEST	443	60939	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.023737907 CEST	60940	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.023782969 CEST	443	60940	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.024281979 CEST	60939	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.024317980 CEST	443	60939	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.024449110 CEST	60940	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.024458885 CEST	443	60940	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.024766922 CEST	60939	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.024780035 CEST	443	60939	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.028294086 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:58.070832014 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:58.075831890 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:58.135196924 CEST	443	60937	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.135421991 CEST	443	60937	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.135498047 CEST	60937	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.135546923 CEST	60937	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.135566950 CEST	443	60937	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.135577917 CEST	60937	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.135584116 CEST	443	60937	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.138072014 CEST	60944	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.138143063 CEST	443	60944	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.138288975 CEST	60944	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.138418913 CEST	60944	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.138446093 CEST	443	60944	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.151622057 CEST	443	60941	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.152066946 CEST	60941	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.152084112 CEST	443	60941	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.152149916 CEST	443	60939	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.152297974 CEST	443	60940	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.152523041 CEST	60941	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.152525902 CEST	443	60940	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.152529955 CEST	443	60941	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.152605057 CEST	60940	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.152683020 CEST	60940	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.152683020 CEST	60940	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.152709961 CEST	443	60940	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.152723074 CEST	443	60940	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.152816057 CEST	443	60939	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.152868986 CEST	60939	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.152899981 CEST	443	60939	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.152949095 CEST	443	60939	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.152993917 CEST	60939	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.153034925 CEST	443	60939	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.153064966 CEST	60939	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.153065920 CEST	60939	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.153086901 CEST	443	60939	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.153105974 CEST	443	60939	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.154681921 CEST	443	60938	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.154839993 CEST	443	60938	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.154901981 CEST	60938	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.155061007 CEST	60938	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.155067921 CEST	443	60938	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.155077934 CEST	60938	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.155082941 CEST	443	60938	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.155771017 CEST	60945	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.155806065 CEST	443	60945	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.155870914 CEST	60945	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.156104088 CEST	60945	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.156112909 CEST	443	60945	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.156471014 CEST	60946	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.156483889 CEST	443	60946	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.156546116 CEST	60946	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.156646967 CEST	60946	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.156657934 CEST	443	60946	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.157128096 CEST	60947	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.157156944 CEST	443	60947	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.157238960 CEST	60947	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.157399893 CEST	60947	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.157428026 CEST	443	60947	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.182032108 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:58.187027931 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:58.282123089 CEST	443	60941	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.282212019 CEST	443	60941	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.282259941 CEST	60941	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.282275915 CEST	443	60941	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.282308102 CEST	443	60941	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.282351017 CEST	60941	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.282573938 CEST	60941	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.282593012 CEST	443	60941	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.282604933 CEST	60941	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.282612085 CEST	443	60941	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.285686016 CEST	60948	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.285711050 CEST	443	60948	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.285774946 CEST	60948	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.285948038 CEST	60948	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.285964966 CEST	443	60948	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.289633989 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:58.294476986 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:58.399025917 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:58.404022932 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:58.509573936 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:58.514678001 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:58.617671013 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:58.622787952 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:58.727092981 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:58.732197046 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:58.836519957 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:58.841459036 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:58.871601105 CEST	443	60944	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.872118950 CEST	60944	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.872150898 CEST	443	60944	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.872587919 CEST	60944	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.872595072 CEST	443	60944	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.900898933 CEST	443	60947	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.901046038 CEST	443	60946	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.901314020 CEST	60947	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.901344061 CEST	443	60947	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.901534081 CEST	60946	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.901551962 CEST	443	60946	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.901768923 CEST	60947	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.901774883 CEST	443	60947	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.902031898 CEST	60946	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.902039051 CEST	443	60946	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.905417919 CEST	443	60945	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.905668020 CEST	60945	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.905677080 CEST	443	60945	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.906033993 CEST	60945	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:58.906039000 CEST	443	60945	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:58.945852995 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:58.950809002 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:59.001893044 CEST	443	60944	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.001982927 CEST	443	60944	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.002057076 CEST	60944	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.002295017 CEST	60944	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.002321005 CEST	443	60944	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.002337933 CEST	60944	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.002346039 CEST	443	60944	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.005244017 CEST	60949	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.005287886 CEST	443	60949	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.005431890 CEST	60949	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.005737066 CEST	60949	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.005749941 CEST	443	60949	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.011771917 CEST	443	60948	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.012475014 CEST	60948	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.012512922 CEST	443	60948	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.012969971 CEST	60948	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.012978077 CEST	443	60948	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.030314922 CEST	443	60947	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.030390978 CEST	443	60947	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.030462980 CEST	60947	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.030673981 CEST	60947	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.030689001 CEST	443	60947	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.030706882 CEST	60947	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.030721903 CEST	443	60947	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.032032013 CEST	443	60946	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.032150030 CEST	443	60946	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.032188892 CEST	443	60946	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.032265902 CEST	60946	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.032442093 CEST	60946	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.032460928 CEST	443	60946	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.032466888 CEST	60946	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.032473087 CEST	443	60946	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.033746958 CEST	60950	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.033780098 CEST	443	60950	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.034033060 CEST	60950	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.034219027 CEST	60950	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.034234047 CEST	443	60950	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.034890890 CEST	60951	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.034929991 CEST	443	60951	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.035022020 CEST	60951	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.035168886 CEST	60951	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.035182953 CEST	443	60951	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.038408995 CEST	443	60945	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.038491011 CEST	443	60945	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.038551092 CEST	60945	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.038717031 CEST	60945	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.038722038 CEST	443	60945	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.038741112 CEST	60945	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.038746119 CEST	443	60945	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.040868998 CEST	60952	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.040903091 CEST	443	60952	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.040961981 CEST	60952	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.041115999 CEST	60952	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.041127920 CEST	443	60952	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.055169106 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:59.060157061 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:59.142236948 CEST	443	60948	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.142354965 CEST	443	60948	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.142458916 CEST	60948	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.142699003 CEST	60948	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.142726898 CEST	443	60948	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.142746925 CEST	60948	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.142754078 CEST	443	60948	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.145894051 CEST	60953	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.145936012 CEST	443	60953	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.146043062 CEST	60953	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.146193981 CEST	60953	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.146210909 CEST	443	60953	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.166039944 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:59.171025038 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:59.273987055 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:59.278867960 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:59.383335114 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:59.388267994 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:59.492969036 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:59.497876883 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:59.602164030 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:59.607184887 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:59.711473942 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:59.719069958 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:59.725538969 CEST	443	60949	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.726105928 CEST	60949	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.726133108 CEST	443	60949	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.726689100 CEST	60949	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.726695061 CEST	443	60949	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.756540060 CEST	443	60951	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.756947041 CEST	60951	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.756962061 CEST	443	60951	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.757320881 CEST	60951	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.757325888 CEST	443	60951	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.792978048 CEST	443	60950	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.793663979 CEST	60950	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.793694019 CEST	443	60950	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.794079065 CEST	60950	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.794085979 CEST	443	60950	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.822658062 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:59.827579021 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:59.853246927 CEST	443	60949	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.853296995 CEST	443	60949	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.853357077 CEST	443	60949	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.853355885 CEST	60949	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.853416920 CEST	60949	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.856786013 CEST	60949	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.856806040 CEST	443	60949	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.856821060 CEST	60949	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.856827974 CEST	443	60949	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.860546112 CEST	60954	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.860588074 CEST	443	60954	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.860661983 CEST	60954	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.860908985 CEST	60954	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.860925913 CEST	443	60954	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.887526989 CEST	443	60951	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.887612104 CEST	443	60951	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.887671947 CEST	60951	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.887794971 CEST	60951	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.887818098 CEST	443	60951	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.887835026 CEST	60951	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.887840986 CEST	443	60951	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.890527964 CEST	60955	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.890575886 CEST	443	60955	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.890651941 CEST	60955	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.890815973 CEST	60955	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.890827894 CEST	443	60955	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.911709070 CEST	443	60953	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.912328005 CEST	60953	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.912339926 CEST	443	60953	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.912787914 CEST	60953	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.912794113 CEST	443	60953	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.923958063 CEST	443	60950	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.924061060 CEST	443	60950	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.924130917 CEST	60950	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.924279928 CEST	60950	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.924302101 CEST	443	60950	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.924314976 CEST	60950	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.924321890 CEST	443	60950	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.927114964 CEST	60956	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.927141905 CEST	443	60956	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.927222967 CEST	60956	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.927372932 CEST	60956	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.927390099 CEST	443	60956	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.930310965 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:09:59.936062098 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:09:59.987617016 CEST	443	60952	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.988070011 CEST	60952	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.988096952 CEST	443	60952	13.107.246.60	192.168.2.6
Oct 18, 2024 12:09:59.988689899 CEST	60952	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:09:59.988697052 CEST	443	60952	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.039727926 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:00.044545889 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:00.047569990 CEST	443	60953	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.047676086 CEST	443	60953	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.047739983 CEST	60953	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.048024893 CEST	60953	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.048042059 CEST	443	60953	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.048055887 CEST	60953	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.048063040 CEST	443	60953	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.051086903 CEST	60957	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.051132917 CEST	443	60957	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.051219940 CEST	60957	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.051363945 CEST	60957	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.051377058 CEST	443	60957	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.117842913 CEST	443	60952	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.117911100 CEST	443	60952	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.117969036 CEST	60952	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.118241072 CEST	60952	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.118258953 CEST	443	60952	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.118277073 CEST	60952	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.118284941 CEST	443	60952	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.121330023 CEST	60958	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.121371031 CEST	443	60958	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.121445894 CEST	60958	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.121575117 CEST	60958	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.121588945 CEST	443	60958	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.152283907 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:00.157418966 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:00.258354902 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:00.263334990 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:00.367961884 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:00.372981071 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:00.478693962 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:00.483586073 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:00.586513996 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:00.591448069 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:00.610052109 CEST	443	60954	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.610665083 CEST	60954	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.610687971 CEST	443	60954	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.611121893 CEST	60954	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.611126900 CEST	443	60954	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.630846024 CEST	443	60955	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.631186008 CEST	60955	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.631215096 CEST	443	60955	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.631618977 CEST	60955	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.631625891 CEST	443	60955	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.665971994 CEST	443	60956	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.666608095 CEST	60956	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.666632891 CEST	443	60956	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.667131901 CEST	60956	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.667149067 CEST	443	60956	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.695832014 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:00.701160908 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:00.742284060 CEST	443	60954	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.742391109 CEST	443	60954	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.742464066 CEST	60954	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.742959976 CEST	60954	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.742978096 CEST	443	60954	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.742993116 CEST	60954	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.742999077 CEST	443	60954	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.746695042 CEST	60959	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.746735096 CEST	443	60959	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.746808052 CEST	60959	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.746952057 CEST	60959	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.746962070 CEST	443	60959	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.761775970 CEST	443	60955	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.761848927 CEST	443	60955	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.761909962 CEST	60955	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.762078047 CEST	60955	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.762099981 CEST	443	60955	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.762115002 CEST	60955	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.762121916 CEST	443	60955	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.765162945 CEST	60960	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.765197992 CEST	443	60960	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.765275955 CEST	60960	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.765403986 CEST	60960	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.765419960 CEST	443	60960	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.778821945 CEST	443	60957	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.779272079 CEST	60957	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.779337883 CEST	443	60957	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.779726982 CEST	60957	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.779745102 CEST	443	60957	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.792774916 CEST	443	60956	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.792876959 CEST	443	60956	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.792948008 CEST	60956	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.793029070 CEST	60956	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.793030024 CEST	60956	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.793072939 CEST	443	60956	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.793100119 CEST	443	60956	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.795404911 CEST	60961	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.795475006 CEST	443	60961	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.795568943 CEST	60961	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.795768023 CEST	60961	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.795800924 CEST	443	60961	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.805176973 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:00.810223103 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:00.857465029 CEST	443	60958	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.867233038 CEST	60958	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.867291927 CEST	443	60958	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.867786884 CEST	60958	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.867800951 CEST	443	60958	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.905824900 CEST	443	60957	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.906106949 CEST	443	60957	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.906162977 CEST	443	60957	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.906191111 CEST	60957	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.906390905 CEST	60957	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.906390905 CEST	60957	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.906390905 CEST	60957	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.908668041 CEST	60962	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.908731937 CEST	443	60962	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.908812046 CEST	60962	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.908935070 CEST	60962	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.908966064 CEST	443	60962	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.914567947 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:00.921000004 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:00.994585037 CEST	443	60958	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.994781971 CEST	443	60958	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.994956970 CEST	60958	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.994956970 CEST	60958	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.994956970 CEST	60958	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.997997046 CEST	60963	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.998085976 CEST	443	60963	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:00.998167038 CEST	60963	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.998348951 CEST	60963	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:00.998380899 CEST	443	60963	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.023902893 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:01.029506922 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:01.114103079 CEST	60957	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.114151001 CEST	443	60957	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.134485960 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:01.139417887 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:01.242727041 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:01.247932911 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:01.305047035 CEST	60958	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.305130005 CEST	443	60958	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.352056980 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:01.357028008 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:01.461436033 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:01.463345051 CEST	443	60959	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.463896036 CEST	60959	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.463926077 CEST	443	60959	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.464355946 CEST	60959	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.464363098 CEST	443	60959	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.466655970 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:01.511147022 CEST	443	60960	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.511648893 CEST	60960	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.511676073 CEST	443	60960	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.512110949 CEST	60960	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.512116909 CEST	443	60960	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.542597055 CEST	443	60961	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.542954922 CEST	60961	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.543016911 CEST	443	60961	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.543344021 CEST	60961	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.543359041 CEST	443	60961	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.570868015 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:01.576626062 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:01.589945078 CEST	443	60959	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.589987040 CEST	443	60959	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.590042114 CEST	60959	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.590049028 CEST	443	60959	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.590099096 CEST	60959	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.590322018 CEST	60959	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.590339899 CEST	443	60959	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.590351105 CEST	60959	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.590357065 CEST	443	60959	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.593348980 CEST	60964	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.593373060 CEST	443	60964	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.593457937 CEST	60964	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.593630075 CEST	60964	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.593643904 CEST	443	60964	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.632055998 CEST	443	60962	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.632515907 CEST	60962	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.632567883 CEST	443	60962	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.632951975 CEST	60962	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.632967949 CEST	443	60962	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.656456947 CEST	443	60960	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.656569004 CEST	443	60960	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.656630039 CEST	60960	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.656780005 CEST	60960	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.656790972 CEST	443	60960	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.656802893 CEST	60960	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.656806946 CEST	443	60960	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.659363031 CEST	60965	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.659404993 CEST	443	60965	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.659488916 CEST	60965	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.659638882 CEST	60965	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.659653902 CEST	443	60965	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.676258087 CEST	443	60961	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.676285982 CEST	443	60961	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.676323891 CEST	443	60961	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.676449060 CEST	60961	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.676759005 CEST	60961	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.676759005 CEST	60961	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.676798105 CEST	443	60961	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.676903963 CEST	443	60961	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.678863049 CEST	60966	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.678877115 CEST	443	60966	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.678946972 CEST	60966	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.679085016 CEST	60966	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.679096937 CEST	443	60966	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.680170059 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:01.685343981 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:01.753684044 CEST	443	60963	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.755040884 CEST	60963	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.755060911 CEST	443	60963	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.755501032 CEST	60963	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.755506039 CEST	443	60963	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.760593891 CEST	443	60962	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.760674000 CEST	443	60962	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.760762930 CEST	60962	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.761009932 CEST	60962	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.761009932 CEST	60962	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.761055946 CEST	443	60962	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.761085033 CEST	443	60962	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.763432980 CEST	60967	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.763463020 CEST	443	60967	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.763542891 CEST	60967	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.763675928 CEST	60967	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:01.763684034 CEST	443	60967	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:01.790805101 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:01.795861006 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:01.898979902 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:02.211370945 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:02.384445906 CEST	443	60963	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.384520054 CEST	443	60963	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.384599924 CEST	60963	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.386604071 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:02.386818886 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:02.386890888 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:02.391948938 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:02.398720026 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:02.403569937 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:02.407274008 CEST	60963	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.407322884 CEST	443	60963	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.513955116 CEST	443	60964	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.514273882 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:02.514513969 CEST	60969	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.514568090 CEST	443	60969	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.514630079 CEST	60969	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.514736891 CEST	60964	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.514754057 CEST	60969	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.514765024 CEST	443	60964	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.514780998 CEST	443	60969	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.515326023 CEST	60964	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.515331984 CEST	443	60964	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.519166946 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:02.520190954 CEST	443	60966	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.520587921 CEST	60966	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.520612955 CEST	443	60966	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.521331072 CEST	60966	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.521337032 CEST	443	60966	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.536267042 CEST	443	60967	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.536780119 CEST	60967	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.536797047 CEST	443	60967	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.537184000 CEST	60967	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.537189007 CEST	443	60967	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.542157888 CEST	443	60965	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.542553902 CEST	60965	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.542563915 CEST	443	60965	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.542970896 CEST	60965	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.542977095 CEST	443	60965	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.617671967 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:02.623094082 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:02.654007912 CEST	443	60964	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.654072046 CEST	443	60964	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.654233932 CEST	60964	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.654324055 CEST	60964	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.654340982 CEST	443	60964	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.654351950 CEST	60964	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.654356956 CEST	443	60964	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.654711962 CEST	443	60966	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.654877901 CEST	443	60966	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.654938936 CEST	60966	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.655227900 CEST	60966	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.655246973 CEST	443	60966	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.655261993 CEST	60966	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.655268908 CEST	443	60966	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.657110929 CEST	60970	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.657140970 CEST	443	60970	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.657191992 CEST	60970	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.657501936 CEST	60971	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.657529116 CEST	443	60971	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.657532930 CEST	60970	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.657550097 CEST	443	60970	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.657592058 CEST	60971	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.657691002 CEST	60971	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.657701969 CEST	443	60971	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.669946909 CEST	443	60967	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.670006037 CEST	443	60967	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.670147896 CEST	60967	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.670172930 CEST	60967	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.670181036 CEST	443	60967	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.670203924 CEST	60967	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.670207977 CEST	443	60967	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.672039986 CEST	60972	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.672056913 CEST	443	60972	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.672122955 CEST	60972	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.672235012 CEST	60972	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.672246933 CEST	443	60972	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.672792912 CEST	443	60965	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.673026085 CEST	443	60965	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.673078060 CEST	60965	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.673108101 CEST	443	60965	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.673149109 CEST	443	60965	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.673191071 CEST	60965	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.673209906 CEST	443	60965	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.673232079 CEST	60965	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.673232079 CEST	60965	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.673238993 CEST	443	60965	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.673245907 CEST	443	60965	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.675112009 CEST	60973	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.675129890 CEST	443	60973	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.675200939 CEST	60973	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.675332069 CEST	60973	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:02.675343990 CEST	443	60973	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:02.727124929 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:02.732057095 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:02.836482048 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:02.841536999 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:02.946286917 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:02.952464104 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:03.055356026 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:03.060534000 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:03.166066885 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:03.170994043 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:03.271858931 CEST	443	60969	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.272304058 CEST	60969	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.272363901 CEST	443	60969	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.272799015 CEST	60969	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.272804976 CEST	443	60969	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.274279118 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:03.279323101 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:03.383287907 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:03.388720989 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:03.396253109 CEST	443	60970	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.396678925 CEST	60970	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.396704912 CEST	443	60970	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.397136927 CEST	60970	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.397145033 CEST	443	60970	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.401767969 CEST	443	60972	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.402067900 CEST	60972	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.402082920 CEST	443	60972	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.402540922 CEST	60972	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.402545929 CEST	443	60972	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.406487942 CEST	443	60969	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.406541109 CEST	443	60969	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.406686068 CEST	443	60969	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.406743050 CEST	60969	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.406781912 CEST	60969	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.406781912 CEST	60969	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.406800032 CEST	443	60969	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.406810999 CEST	443	60969	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.409384012 CEST	60974	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.409421921 CEST	443	60974	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.409565926 CEST	60974	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.409687996 CEST	60974	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.409704924 CEST	443	60974	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.414731979 CEST	443	60973	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.415039062 CEST	60973	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.415052891 CEST	443	60973	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.415479898 CEST	60973	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.415488005 CEST	443	60973	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.417049885 CEST	443	60971	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.417331934 CEST	60971	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.417357922 CEST	443	60971	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.417777061 CEST	60971	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.417788029 CEST	443	60971	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.492849112 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:03.497778893 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:03.538436890 CEST	443	60970	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.538487911 CEST	443	60970	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.538676023 CEST	60970	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.538710117 CEST	60970	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.538733959 CEST	443	60970	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.538748980 CEST	60970	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.538757086 CEST	443	60970	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.539027929 CEST	443	60972	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.539055109 CEST	443	60972	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.539113045 CEST	443	60972	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.539117098 CEST	60972	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.539154053 CEST	60972	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.539345980 CEST	60972	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.539359093 CEST	443	60972	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.541763067 CEST	60975	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.541785002 CEST	443	60975	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.541867018 CEST	60976	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.541893959 CEST	60975	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.541904926 CEST	443	60976	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.541950941 CEST	60976	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.542021036 CEST	60975	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.542032957 CEST	443	60975	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.542112112 CEST	60976	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.542126894 CEST	443	60976	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.544565916 CEST	443	60973	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.544611931 CEST	443	60973	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.544734955 CEST	443	60973	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.544749022 CEST	60973	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.544790030 CEST	60973	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.544830084 CEST	60973	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.544858932 CEST	443	60973	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.544874907 CEST	60973	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.544883013 CEST	443	60973	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.546813965 CEST	60977	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.546844006 CEST	443	60977	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.546994925 CEST	60977	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.547151089 CEST	60977	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.547163963 CEST	443	60977	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.552221060 CEST	443	60971	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.552242041 CEST	443	60971	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.552289963 CEST	443	60971	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.552293062 CEST	60971	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.552330971 CEST	60971	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.552437067 CEST	60971	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.552437067 CEST	60971	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.552457094 CEST	443	60971	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.552469969 CEST	443	60971	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.554392099 CEST	60978	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.554404020 CEST	443	60978	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.554470062 CEST	60978	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.554579973 CEST	60978	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:03.554590940 CEST	443	60978	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:03.602175951 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:03.607259035 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:03.713356972 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:03.718620062 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:03.824721098 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:03.829880953 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:03.930883884 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:03.935914993 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:04.039674997 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:04.044773102 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:04.149207115 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:04.154165983 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:04.160247087 CEST	443	60974	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.160785913 CEST	60974	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.160800934 CEST	443	60974	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.161379099 CEST	60974	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.161382914 CEST	443	60974	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.258382082 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:04.262479067 CEST	443	60976	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.262866020 CEST	60976	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.262901068 CEST	443	60976	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.263268948 CEST	60976	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.263277054 CEST	443	60976	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.264137030 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:04.290623903 CEST	443	60975	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.290960073 CEST	60975	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.290988922 CEST	443	60975	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.291300058 CEST	443	60978	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.291352034 CEST	60975	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.291364908 CEST	443	60975	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.291547060 CEST	60978	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.291568041 CEST	443	60978	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.292104006 CEST	60978	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.292109013 CEST	443	60978	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.294747114 CEST	443	60974	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.294768095 CEST	443	60974	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.294819117 CEST	60974	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.294832945 CEST	443	60974	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.295017004 CEST	443	60974	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.295062065 CEST	60974	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.295130968 CEST	60974	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.295144081 CEST	443	60974	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.295151949 CEST	60974	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.295156956 CEST	443	60974	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.298810005 CEST	60979	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.298845053 CEST	443	60979	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.298914909 CEST	60979	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.299092054 CEST	60979	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.299108982 CEST	443	60979	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.306626081 CEST	443	60977	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.307327986 CEST	60977	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.307337999 CEST	443	60977	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.308516979 CEST	60977	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.308522940 CEST	443	60977	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.368005037 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:04.373949051 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:04.393285990 CEST	443	60976	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.393390894 CEST	443	60976	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.393446922 CEST	60976	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.393562078 CEST	60976	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.393587112 CEST	443	60976	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.393601894 CEST	60976	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.393610001 CEST	443	60976	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.396537066 CEST	60980	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.396598101 CEST	443	60980	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.396692038 CEST	60980	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.396871090 CEST	60980	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.396905899 CEST	443	60980	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.420267105 CEST	443	60978	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.420418978 CEST	443	60978	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.420489073 CEST	60978	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.420558929 CEST	60978	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.420583963 CEST	443	60978	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.420602083 CEST	60978	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.420608997 CEST	443	60978	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.422941923 CEST	60981	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.422991037 CEST	443	60981	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.423073053 CEST	60981	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.423206091 CEST	60981	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.423235893 CEST	443	60981	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.424355984 CEST	443	60975	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.424428940 CEST	443	60975	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.424482107 CEST	60975	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.424624920 CEST	60975	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.424624920 CEST	60975	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.424670935 CEST	443	60975	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.424700975 CEST	443	60975	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.427069902 CEST	60982	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.427103043 CEST	443	60982	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.427179098 CEST	60982	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.427304029 CEST	60982	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.427329063 CEST	443	60982	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.438637972 CEST	443	60977	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.438807964 CEST	443	60977	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.438896894 CEST	60977	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.439075947 CEST	60977	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.439085960 CEST	443	60977	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.439100981 CEST	60977	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.439106941 CEST	443	60977	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.441315889 CEST	60983	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.441348076 CEST	443	60983	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.441432953 CEST	60983	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.441555023 CEST	60983	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:04.441585064 CEST	443	60983	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:04.477870941 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:04.483381033 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:04.586725950 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:04.591777086 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:04.695982933 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:04.701191902 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:04.805759907 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:04.810846090 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:04.914874077 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:04.920785904 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:05.024040937 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:05.028852940 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:05.036102057 CEST	443	60979	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.036617994 CEST	60979	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.036636114 CEST	443	60979	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.037214041 CEST	60979	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.037221909 CEST	443	60979	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.129200935 CEST	443	60980	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.129874945 CEST	60980	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.129901886 CEST	443	60980	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.130597115 CEST	60980	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.130603075 CEST	443	60980	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.133877039 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:05.138708115 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:05.170661926 CEST	443	60979	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.170717001 CEST	443	60979	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.170784950 CEST	60979	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.170804024 CEST	443	60979	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.170847893 CEST	60979	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.170850039 CEST	443	60979	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.170902967 CEST	60979	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.171056986 CEST	60979	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.171075106 CEST	443	60979	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.171087980 CEST	60979	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.171094894 CEST	443	60979	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.174623966 CEST	60984	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.174657106 CEST	443	60984	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.174758911 CEST	60984	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.174905062 CEST	60984	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.174917936 CEST	443	60984	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.181592941 CEST	443	60982	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.181617022 CEST	443	60981	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.181966066 CEST	60982	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.182046890 CEST	443	60982	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.182105064 CEST	60981	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.182121038 CEST	443	60981	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.182431936 CEST	60982	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.182445049 CEST	443	60982	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.182692051 CEST	60981	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.182702065 CEST	443	60981	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.213124037 CEST	443	60983	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.213685989 CEST	60983	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.213711023 CEST	443	60983	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.214421034 CEST	60983	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.214426994 CEST	443	60983	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.242938042 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:05.248014927 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:05.258241892 CEST	443	60980	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.258279085 CEST	443	60980	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.258344889 CEST	60980	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.258344889 CEST	443	60980	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.258397102 CEST	60980	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.258630991 CEST	60980	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.258642912 CEST	443	60980	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.258677959 CEST	60980	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.258682966 CEST	443	60980	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.261703968 CEST	60985	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.261785984 CEST	443	60985	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.261873960 CEST	60985	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.262048960 CEST	60985	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.262078047 CEST	443	60985	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.315502882 CEST	443	60982	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.315535069 CEST	443	60982	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.315588951 CEST	60982	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.315625906 CEST	443	60982	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.315664053 CEST	443	60982	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.315810919 CEST	60982	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.315891981 CEST	60982	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.315924883 CEST	443	60982	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.315954924 CEST	60982	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.315969944 CEST	443	60982	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.318927050 CEST	60986	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.318978071 CEST	443	60986	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.319070101 CEST	60986	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.319240093 CEST	60986	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.319282055 CEST	443	60986	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.352293015 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:05.357474089 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:05.461579084 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:05.773812056 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:05.965693951 CEST	443	60981	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.965735912 CEST	443	60981	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.965755939 CEST	443	60981	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.965847015 CEST	60981	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.965878010 CEST	443	60981	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.965929031 CEST	60981	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.967025042 CEST	443	60981	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.967139006 CEST	443	60981	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.967187881 CEST	60981	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.967216969 CEST	60981	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.967257023 CEST	60981	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.967293024 CEST	443	60981	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.967319012 CEST	60981	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.967334032 CEST	443	60981	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.968987942 CEST	443	60983	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.969059944 CEST	443	60983	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.969104052 CEST	443	60983	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.969144106 CEST	60983	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.969237089 CEST	443	60983	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.969280958 CEST	60983	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.969305992 CEST	60983	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.969959974 CEST	60987	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.970041990 CEST	443	60987	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.970123053 CEST	60987	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.970298052 CEST	60987	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.970331907 CEST	443	60987	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.972100973 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:05.972177029 CEST	60942	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:05.972182989 CEST	443	60983	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.972249031 CEST	443	60983	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.972280025 CEST	60983	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.972301006 CEST	443	60983	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.972327948 CEST	60983	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.972346067 CEST	60983	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.972378969 CEST	443	60983	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.972434044 CEST	60983	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.972479105 CEST	60983	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.972479105 CEST	60983	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.972512007 CEST	443	60983	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.972538948 CEST	443	60983	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.972700119 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:05.972711086 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:05.976026058 CEST	60988	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.976064920 CEST	443	60988	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.976120949 CEST	60988	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.976277113 CEST	60988	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:05.976289988 CEST	443	60988	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:05.977114916 CEST	15647	60942	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:06.026593924 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:06.031636000 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:06.031742096 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:06.035703897 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:06.040505886 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:06.100717068 CEST	443	60984	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.101264000 CEST	60984	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.101283073 CEST	443	60984	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.101723909 CEST	60984	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.101730108 CEST	443	60984	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.103785992 CEST	443	60985	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.104192019 CEST	60985	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.104255915 CEST	443	60985	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.104716063 CEST	60985	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.104732990 CEST	443	60985	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.105252981 CEST	443	60986	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.105587959 CEST	60986	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.105604887 CEST	443	60986	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.105957031 CEST	60986	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.105967999 CEST	443	60986	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.149193048 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:06.154025078 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:06.229537964 CEST	443	60984	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.229574919 CEST	443	60984	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.229635000 CEST	443	60984	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.229650021 CEST	60984	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.229688883 CEST	60984	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.229935884 CEST	60984	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.229952097 CEST	443	60984	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.229962111 CEST	60984	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.229967117 CEST	443	60984	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.233097076 CEST	60990	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.233138084 CEST	443	60990	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.233221054 CEST	60990	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.233382940 CEST	60990	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.233398914 CEST	443	60990	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.235532999 CEST	443	60985	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.235553980 CEST	443	60985	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.235613108 CEST	443	60985	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.235622883 CEST	60985	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.235680103 CEST	60985	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.235805988 CEST	60985	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.235863924 CEST	443	60985	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.235902071 CEST	60985	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.235918999 CEST	443	60985	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.237979889 CEST	443	60986	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.238075018 CEST	443	60986	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.238135099 CEST	60986	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.238156080 CEST	60991	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.238188028 CEST	443	60991	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.238241911 CEST	60991	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.238262892 CEST	60986	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.238279104 CEST	443	60986	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.238306999 CEST	60986	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.238318920 CEST	443	60986	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.238382101 CEST	60991	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.238396883 CEST	443	60991	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.240477085 CEST	60992	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.240489006 CEST	443	60992	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.240550041 CEST	60992	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.240674973 CEST	60992	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.240684032 CEST	443	60992	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.258395910 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:06.263197899 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:06.367688894 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:06.372566938 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:06.477068901 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:06.481986046 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:06.587207079 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:06.592196941 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:06.695800066 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:06.700762033 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:06.724344969 CEST	443	60987	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.726933956 CEST	60987	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.726977110 CEST	443	60987	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.727659941 CEST	60987	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.727667093 CEST	443	60987	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.729995966 CEST	443	60988	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.731690884 CEST	60988	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.731703997 CEST	443	60988	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.738492966 CEST	60988	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.738511086 CEST	443	60988	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.805547953 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:06.810568094 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:06.859061003 CEST	443	60987	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.859251022 CEST	443	60987	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.859441042 CEST	60987	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.859498024 CEST	60987	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.859514952 CEST	443	60987	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.859532118 CEST	60987	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.859536886 CEST	443	60987	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.862612963 CEST	60993	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.862677097 CEST	443	60993	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.862767935 CEST	60993	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.862942934 CEST	60993	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.862966061 CEST	443	60993	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.867625952 CEST	443	60988	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.867702007 CEST	443	60988	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.867786884 CEST	60988	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.867996931 CEST	60988	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.868014097 CEST	443	60988	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.868027925 CEST	60988	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.868033886 CEST	443	60988	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.870634079 CEST	60994	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.870649099 CEST	443	60994	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.870722055 CEST	60994	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.870906115 CEST	60994	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.870922089 CEST	443	60994	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.914799929 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:06.919718027 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:06.961205959 CEST	443	60992	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.962054014 CEST	60992	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.962089062 CEST	443	60992	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.962526083 CEST	60992	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.962539911 CEST	443	60992	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.987643003 CEST	443	60991	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.988197088 CEST	60991	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.988233089 CEST	443	60991	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:06.988573074 CEST	60991	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:06.988584995 CEST	443	60991	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.025057077 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:07.030059099 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:07.088390112 CEST	443	60992	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.088493109 CEST	443	60992	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.088644981 CEST	60992	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.088959932 CEST	60992	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.088984966 CEST	443	60992	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.089082956 CEST	60992	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.089092016 CEST	443	60992	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.092099905 CEST	60995	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.092144966 CEST	443	60995	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.092662096 CEST	60995	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.092662096 CEST	60995	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.092711926 CEST	443	60995	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.133480072 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:07.382683992 CEST	443	60991	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.382735014 CEST	443	60991	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.382812023 CEST	443	60991	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.382831097 CEST	60991	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.382880926 CEST	60991	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.383356094 CEST	60991	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.383368015 CEST	443	60991	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.383382082 CEST	60991	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.383394003 CEST	443	60991	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.384402037 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:07.384615898 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:07.386547089 CEST	443	60990	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.387069941 CEST	60990	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.387088060 CEST	443	60990	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.387654066 CEST	60990	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.387659073 CEST	443	60990	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.389549971 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:07.461582899 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:07.466492891 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:07.538017035 CEST	443	60990	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.538127899 CEST	443	60990	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.538245916 CEST	60990	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.538579941 CEST	60990	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.538604021 CEST	443	60990	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.538615942 CEST	60990	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.538623095 CEST	443	60990	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.570947886 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:07.575895071 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:07.622339010 CEST	443	60993	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.623256922 CEST	60993	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.623286963 CEST	443	60993	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.623814106 CEST	60993	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.623823881 CEST	443	60993	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.625694036 CEST	443	60994	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.626039028 CEST	60994	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.626055956 CEST	443	60994	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.626545906 CEST	60994	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.626554012 CEST	443	60994	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.680344105 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:07.685297966 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:07.757958889 CEST	443	60993	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.758255005 CEST	443	60993	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.758361101 CEST	60993	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.758363008 CEST	443	60994	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.758528948 CEST	443	60994	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.758586884 CEST	60994	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.759238958 CEST	60993	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.759269953 CEST	443	60993	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.759306908 CEST	60993	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.759314060 CEST	443	60993	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.772214890 CEST	60994	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.772268057 CEST	443	60994	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.772285938 CEST	60994	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:07.772293091 CEST	443	60994	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:07.789691925 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:07.794645071 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:07.899514914 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:07.904537916 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:08.010765076 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:08.015609026 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:08.117728949 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:08.122612953 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:08.132751942 CEST	443	60995	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:08.133596897 CEST	60995	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:08.133618116 CEST	443	60995	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:08.134197950 CEST	60995	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:08.134208918 CEST	443	60995	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:08.227152109 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:08.232208014 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:08.267086029 CEST	443	60995	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:08.267293930 CEST	443	60995	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:08.267371893 CEST	60995	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:08.267566919 CEST	60995	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:08.267591000 CEST	443	60995	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:08.267606974 CEST	60995	443	192.168.2.6	13.107.246.60
Oct 18, 2024 12:10:08.267613888 CEST	443	60995	13.107.246.60	192.168.2.6
Oct 18, 2024 12:10:08.336739063 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:08.341870070 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:08.446052074 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:08.451241970 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:08.555862904 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:08.561109066 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:08.665776968 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:08.670824051 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:08.774238110 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:08.779630899 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:08.883497000 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:08.888559103 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:08.992820978 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:08.998768091 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:09.102169991 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:09.107451916 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:09.212146044 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:09.217081070 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:09.322587013 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:09.327825069 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:09.430269957 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:09.435300112 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:09.539627075 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:09.544817924 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:09.649810076 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:09.655049086 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:09.758280993 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:09.763537884 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:09.868350983 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:09.873523951 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:09.978566885 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:09.983505964 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:10.086438894 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:10.091372013 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:10.195806026 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:10.200778008 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:10.305322886 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:10.310446978 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:10.414598942 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:10.419972897 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:10.524363041 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:10.537448883 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:10.634480953 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:10.639758110 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:10.742911100 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:10.747977972 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:10.852250099 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:10.857131004 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:10.961509943 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:10.966312885 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:11.070883036 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:11.075830936 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:11.183583021 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:11.188565016 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:11.290366888 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:11.295409918 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:11.399033070 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:11.404026031 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:11.509247065 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:11.514229059 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:11.617950916 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:11.623003006 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:11.727184057 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:11.733977079 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:11.837018967 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:11.842951059 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:11.946716070 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:11.952064991 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:12.055241108 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:12.060275078 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:12.164575100 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:12.169888020 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:12.273946047 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:12.279067993 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:12.383311987 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:12.388264894 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:12.493257999 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:12.498246908 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:12.602957010 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:12.607943058 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:12.711493015 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:12.717612982 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:12.820838928 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:12.835920095 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:12.933969021 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:12.940340042 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:13.039675951 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:13.046209097 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:13.149554968 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:13.155452967 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:13.258713007 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:13.263824940 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:13.367778063 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:13.374732018 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:13.477060080 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:13.482079983 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:13.586437941 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:13.591356993 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:13.695838928 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:13.700763941 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:13.805660963 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:13.811574936 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:13.914791107 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:13.920205116 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:14.023988962 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:14.029058933 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:14.133436918 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:14.138674974 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:14.242971897 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:14.248265028 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:14.352121115 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:14.357208014 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:14.462002039 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:14.466954947 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:14.537774086 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:14.537915945 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:14.578253984 CEST	60989	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:14.585136890 CEST	15647	60989	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:14.680527925 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:14.685837984 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:14.685950994 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:14.686177969 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:14.690987110 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:14.790585041 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:14.795609951 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:14.899076939 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:14.904633999 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:15.008348942 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:15.013473034 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:15.117669106 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:15.122458935 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:15.227457047 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:15.232397079 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:15.336440086 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:15.341618061 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:15.445923090 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:15.450917006 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:15.555358887 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:15.560336113 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:15.664589882 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:15.670509100 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:15.758470058 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:15.763339043 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:15.852489948 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:15.857414961 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:15.946518898 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:15.951569080 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:16.039611101 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:16.044660091 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:16.133452892 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:16.138430119 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:16.227114916 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:16.232109070 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:16.326188087 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:16.331171989 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:16.430910110 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:16.436005116 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:16.524003029 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:16.535237074 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:16.617780924 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:16.622786999 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:16.711431026 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:16.717005014 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:16.805356979 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:16.811434984 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:16.899040937 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:16.903945923 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:16.993120909 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:16.998884916 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:17.086467028 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:17.091483116 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:17.180214882 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:17.185281992 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:17.273916006 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:17.279130936 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:17.367665052 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:17.372545004 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:17.461545944 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:17.467055082 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:17.555895090 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:17.561151981 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:17.649055004 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:17.654289961 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:17.742697001 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:17.747823000 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:17.836555958 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:17.841474056 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:17.930205107 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:17.935276985 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:18.024040937 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:18.029026985 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:18.118117094 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:18.124881983 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:18.211513042 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:18.216902018 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:18.305172920 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:18.310383081 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:18.399717093 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:18.404925108 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:18.492805958 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:18.497917891 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:18.586570978 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:18.591635942 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:18.680521011 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:18.685470104 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:18.774018049 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:18.778995037 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:18.867889881 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:18.872731924 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:18.961538076 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:18.966453075 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:19.055531025 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:19.060590982 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:19.149158955 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:19.154227018 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:19.243273973 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:19.249681950 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:19.336775064 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:19.341753960 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:19.430320978 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:19.435610056 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:19.524059057 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:19.535516977 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:19.617846012 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:19.622817993 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:19.711438894 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:19.717551947 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:19.806080103 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:19.811009884 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:19.899009943 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:19.905106068 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:19.992666006 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:19.997823000 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:20.086535931 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:20.091526985 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:20.180376053 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:20.185293913 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:20.273983002 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:20.279489040 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:20.368042946 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:20.373248100 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:20.461870909 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:20.466878891 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:20.555342913 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:20.560496092 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:20.648896933 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:20.654460907 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:20.742722034 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:20.747838020 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:20.836590052 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:20.841623068 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:20.930713892 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:20.935673952 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:21.008780956 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:21.013921022 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:21.086550951 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:21.091476917 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:21.164758921 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:21.169768095 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:21.242785931 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:21.247673988 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:21.323874950 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:21.328816891 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:21.415199995 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:21.420217991 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:21.492922068 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:21.497950077 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:21.571024895 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:21.576426983 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:21.648972988 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:21.653871059 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:21.727148056 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:21.732052088 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:21.807343006 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:21.813294888 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:21.885539055 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:21.890808105 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:21.961529970 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:21.966486931 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:22.039767981 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:22.044778109 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:22.117697954 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:22.122773886 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:22.196016073 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:22.201100111 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:22.273977041 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:22.278980970 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:22.352602005 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:22.357436895 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:22.430315018 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:22.435187101 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:22.508685112 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:22.513550997 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:22.586646080 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:22.591902018 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:22.664616108 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:22.669837952 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:22.742765903 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:22.747658014 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:22.821332932 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:22.826318979 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:22.899064064 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:22.904144049 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:22.977425098 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:22.982383966 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:23.055603027 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:23.060539961 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:23.133481979 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:23.138367891 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:23.176763058 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:23.176918983 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:23.213057995 CEST	60996	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:23.217921972 CEST	15647	60996	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:23.289881945 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:23.294671059 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:23.294759035 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:23.295099974 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:23.300050020 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:23.368119001 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:23.372956038 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:23.446110010 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:23.450917959 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:23.527137041 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:23.533814907 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:23.603116035 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:23.608136892 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:23.680259943 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:23.685666084 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:23.758316994 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:23.763174057 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:23.838490009 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:23.843398094 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:23.914665937 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:23.919527054 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:23.992778063 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:23.998090029 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:24.070822001 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:24.076033115 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:24.148920059 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:24.154247046 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:24.227257013 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:24.232101917 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:24.306394100 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:24.311289072 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:24.383275986 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:24.388391972 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:24.461366892 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:24.466212988 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:24.539602995 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:24.544595003 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:24.617944956 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:24.622855902 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:24.695919991 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:24.700921059 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:24.775485992 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:24.780512094 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:24.852016926 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:24.856934071 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:24.930300951 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:24.935224056 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:25.008668900 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:25.013627052 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:25.086580038 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:25.091515064 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:25.164772987 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:25.169732094 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:25.244343042 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:25.249310017 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:25.320914984 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:25.325764894 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:25.399008036 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:25.403875113 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:25.477061987 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:25.481878996 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:25.555434942 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:25.560250998 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:25.634025097 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:25.639048100 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:25.713176966 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:25.718170881 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:25.789674044 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:25.794632912 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:25.867845058 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:25.872750044 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:25.949378014 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:25.954240084 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:26.024082899 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:26.029109955 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:26.086834908 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:26.091746092 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:26.166079044 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:26.170989037 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:26.242947102 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:26.247828960 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:26.328351021 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:26.333386898 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:26.399111986 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:26.403970003 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:26.461858034 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:26.466689110 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:26.524360895 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:26.535191059 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:26.588155031 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:26.593063116 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:26.667433023 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:26.672369003 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:26.742800951 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:26.747819901 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:26.805418015 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:26.810497046 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:26.867850065 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:26.872706890 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:26.930267096 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:26.935220003 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:26.994472027 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:27.004205942 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:27.055486917 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:27.060339928 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:27.124583960 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:27.129612923 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:27.195847034 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:27.200812101 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:27.258508921 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:27.570775986 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:27.660248041 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:27.660263062 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:27.660315037 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:27.665093899 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:27.674851894 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:27.679636955 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:27.834858894 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:27.839798927 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:27.922045946 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:27.927000046 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:27.992923975 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:27.998856068 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:28.055346966 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:28.060354948 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:28.117815018 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:28.122797966 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:28.180362940 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:28.185861111 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:28.242707968 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:28.247612953 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:28.306390047 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:28.311425924 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:28.367800951 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:28.372898102 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:28.430198908 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:28.435276985 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:28.492842913 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:28.497854948 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:28.555346012 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:28.560185909 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:28.618012905 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:28.623142958 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:28.681406975 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:28.686515093 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:28.742686987 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:28.748009920 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:28.805243015 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:28.810499907 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:28.867753983 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:28.873130083 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:28.930335045 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:28.935338020 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:28.992711067 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:28.998373032 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:29.056516886 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:29.061453104 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:29.120379925 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:29.125442028 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:29.180303097 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:29.185467958 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:29.242784977 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:29.247664928 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:29.305363894 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:29.310381889 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:29.367764950 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:29.372669935 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:29.431421041 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:29.436309099 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:29.492811918 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:29.497752905 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:29.555177927 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:29.560333967 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:29.617661953 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:29.622910976 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:29.680227995 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:29.685194016 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:29.742806911 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:29.747788906 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:29.806407928 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:29.811435938 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:29.867669106 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:29.872571945 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:29.930258036 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:29.935158968 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:29.992729902 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:29.998142958 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:30.055356979 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:30.060389042 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:30.117839098 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:30.122795105 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:30.181876898 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:30.186753988 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:30.242800951 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:30.247718096 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:30.326164007 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:30.331171036 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:30.383332014 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:30.388174057 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:30.447690964 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:30.452696085 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:30.508739948 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:30.513700008 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:30.584131002 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:30.589097023 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:30.648950100 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:30.654275894 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:30.711513042 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:30.716455936 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:30.774002075 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:30.778896093 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:30.836900949 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:30.842056036 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:30.899132967 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:30.905244112 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:30.962805986 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:30.967700005 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:31.024081945 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:31.028896093 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:31.086431026 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:31.091415882 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:31.149228096 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:31.154027939 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:31.211479902 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:31.216470957 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:31.274005890 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:31.279337883 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:31.338582993 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:31.343692064 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:31.398953915 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:31.403872013 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:31.461395025 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:31.466311932 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:31.524945974 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:31.537405014 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:31.586596012 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:31.591483116 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:31.648933887 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:31.653871059 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:31.712869883 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:31.717797995 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:31.773941040 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:31.777009010 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:31.777196884 CEST	60997	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:31.778870106 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:31.782155037 CEST	15647	60997	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:31.836770058 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:31.841686964 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:31.841778040 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:31.841993093 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:31.847651005 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:31.898940086 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:32.208622932 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:32.820733070 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:32.951538086 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:32.951555014 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:32.951569080 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:32.951636076 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:32.956703901 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:32.963416100 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:32.968223095 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:33.009411097 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:33.014455080 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:33.055744886 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:33.060609102 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:33.102582932 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:33.107391119 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:33.149148941 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:33.154020071 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:33.195897102 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:33.201168060 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:33.243417978 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:33.248327971 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:33.289629936 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:33.294547081 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:33.336545944 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:33.341481924 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:33.383322954 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:33.388469934 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:33.430196047 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:33.435065031 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:33.477088928 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:33.481964111 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:33.524518013 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:33.542134047 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:33.571074009 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:33.576050997 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:33.618133068 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:33.623198986 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:33.664710045 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:33.669637918 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:33.711514950 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:33.716382027 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:33.758388996 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:33.763448000 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:33.805984974 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:33.811249018 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:33.852320910 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:34.164524078 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:34.179090023 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:34.179433107 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:34.195909977 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:34.200807095 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:34.242860079 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:34.248090982 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:34.289706945 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:34.294745922 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:34.336776972 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:34.341742992 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:34.383392096 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:34.388477087 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:34.431065083 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:34.436050892 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:34.477240086 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:34.482167959 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:34.523952961 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:34.528871059 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:34.570880890 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:34.575944901 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:34.620223999 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:34.625500917 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:34.664827108 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:34.669763088 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:34.712366104 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:34.717349052 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:34.758696079 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:34.763611078 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:34.805396080 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:34.810400009 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:34.852224112 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:34.857096910 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:34.898967028 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:34.903784990 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:34.945871115 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:34.950812101 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:34.993292093 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:34.998682022 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:35.039702892 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:35.044549942 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:35.086467028 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:35.091449976 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:35.133652925 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:35.139131069 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:35.180188894 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:35.185286999 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:35.227164030 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:35.232336044 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:35.274681091 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:35.279829025 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:35.320868969 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:35.325860023 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:35.367841005 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:35.372798920 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:35.414791107 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:35.419779062 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:35.461606026 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:35.466612101 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:35.508342981 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:35.513911009 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:35.555850029 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:35.561024904 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:35.602183104 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:35.607367992 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:35.649070978 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:35.654139042 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:35.695880890 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:35.701024055 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:35.742734909 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:35.747953892 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:35.789763927 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:35.794719934 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:35.836994886 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:35.841895103 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:35.883476973 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:35.888549089 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:35.930345058 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:35.935146093 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:35.977227926 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:35.982309103 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:36.024043083 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:36.028826952 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:36.070905924 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:36.075762033 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:36.118674040 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:36.123519897 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:36.164784908 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:36.169637918 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:36.211580992 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:36.216378927 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:36.258416891 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:36.263576984 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:36.305398941 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:36.310343027 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:36.352078915 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:36.356971025 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:36.399732113 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:36.404690027 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:36.445907116 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:36.450970888 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:36.492887020 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:36.497793913 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:36.539712906 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:36.544605017 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:36.586602926 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:36.591458082 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:36.633424997 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:36.638345957 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:36.680913925 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:36.685921907 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:36.727222919 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:36.732049942 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:36.774228096 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:36.779843092 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:36.821105003 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:36.826108932 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:36.867764950 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:36.872687101 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:36.914762020 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:36.919780970 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:36.961994886 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:36.967719078 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.008477926 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.013396025 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.055269003 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.060139894 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.102138996 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.107201099 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.149104118 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.154118061 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.196053028 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.200982094 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.243248940 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.248183966 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.289572001 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.294749975 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.336522102 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.341706991 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.383455038 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.388518095 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.430423975 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.435306072 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.477093935 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.483011961 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.509128094 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.514194012 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.555192947 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.560221910 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.586442947 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.591569901 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.617750883 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.622678995 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.649035931 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.654465914 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.695907116 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.700848103 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.743434906 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.748502016 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.789678097 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.794614077 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.836564064 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.841590881 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.867973089 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.873387098 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.899187088 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.904443026 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.930670977 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.935811996 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.962121010 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.967135906 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:37.992821932 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:37.999669075 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.023966074 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.029052019 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.055212021 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.060091972 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.086968899 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.091881037 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.117805958 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.123749971 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.149657965 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.155344009 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.180344105 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.185256004 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.211527109 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.216407061 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.242755890 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.247752905 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.273991108 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.279179096 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.305346966 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.310368061 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.336997986 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.342947006 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.367677927 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.372833014 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.398972988 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.404331923 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.430382013 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.435662031 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.461738110 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.467633009 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.493037939 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.498033047 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.524852037 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.540708065 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.557715893 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.569834948 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.586538076 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.591576099 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.617795944 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.622894049 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.649133921 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.654247046 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:38.680258036 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:38.992651939 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.111680031 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.111731052 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.111782074 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.117403030 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.141592979 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.147133112 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.236520052 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.241580009 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.282118082 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.288921118 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.321719885 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.328617096 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.362462997 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.368416071 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.401190042 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.408447981 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.451189995 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.456724882 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.503232002 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.510855913 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.539808989 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.549729109 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.570980072 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.585442066 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.602109909 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.612175941 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.633407116 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.657613039 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.665134907 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.673558950 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.696774960 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.721951008 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.727022886 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.764372110 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.764439106 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.786664009 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.789913893 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.822206020 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.822269917 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.852804899 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.853003979 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.878252029 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.884392023 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.915586948 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.915707111 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.958698034 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.958775997 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:39.992693901 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:39.992791891 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.007344007 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.008646011 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.057533026 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.057627916 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.099518061 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.099596024 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.154238939 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.154306889 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.182313919 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.182370901 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.231695890 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.231880903 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.247556925 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.258471966 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.265954018 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.291399002 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.297656059 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.321177959 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.344012022 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.352212906 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.360997915 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.361134052 CEST	60999	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.391596079 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.408304930 CEST	15647	60999	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.415018082 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.451488972 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.451664925 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.451828003 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.458453894 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.477658033 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.482568979 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.508462906 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.523437977 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.539702892 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.603705883 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.603830099 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.645219088 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.645340919 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.655106068 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.665081024 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.673804045 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.695869923 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.700829983 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.727171898 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.733273983 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.758410931 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.766355038 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.789566040 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.795707941 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.821263075 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.826405048 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.852786064 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.864902020 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.883769989 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.938286066 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.938410997 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.966648102 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.966718912 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.974379063 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:40.977277040 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:40.982299089 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.008372068 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.014086008 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.040271044 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.056456089 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.071055889 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.076050997 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.102224112 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.109601974 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.133462906 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.162795067 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.164709091 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.220618010 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.220782995 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.250775099 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.250888109 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.256481886 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.258492947 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.263736963 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.289832115 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.295034885 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.323641062 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.354034901 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.354104042 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.419667006 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.419914007 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.459628105 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.459805965 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.481914997 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.482116938 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.489593029 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.508570910 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.517083883 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.540062904 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.556032896 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.570898056 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.576684952 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.613754034 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.619066954 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.649266005 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.654251099 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.680423975 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.688910961 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.711600065 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.742166042 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.742813110 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.798151970 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.798245907 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.837752104 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.837923050 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:41.866138935 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:41.866214037 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:42.117604971 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:42.430309057 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:42.976870060 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:42.976883888 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:42.977091074 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:42.977109909 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:42.984436035 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:42.992811918 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:42.998605967 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.024028063 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.029217005 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.055784941 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.062024117 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.086432934 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.091377974 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.117671967 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.124681950 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.149049044 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.154145002 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.180305004 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.185338020 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.211663961 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.216653109 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.243125916 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.248073101 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.274044991 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.278994083 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.305279970 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.310973883 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.337035894 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.341980934 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.367835999 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.372735023 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.399081945 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.404004097 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.430859089 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.435859919 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.461461067 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.467339993 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.492714882 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.497749090 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.524040937 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.538970947 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.555250883 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.560962915 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.586724997 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.591660023 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.618206024 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.623549938 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.649023056 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.654093027 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.680279016 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.685554981 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.711469889 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.718914986 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.742696047 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.748191118 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.773938894 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.779092073 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.805850983 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.810916901 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.836507082 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.841536999 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.867831945 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.872777939 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.899468899 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.904465914 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.932399035 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.937303066 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.961486101 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.966588974 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:43.993223906 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:43.999443054 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.023972988 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.029112101 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.055434942 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.061346054 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.086572886 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.091681957 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.117726088 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.122863054 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.149080038 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.154057980 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.180677891 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.186265945 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.211441040 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.216434002 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.242930889 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.247922897 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.274048090 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.279725075 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.305427074 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.305706978 CEST	60710	80	192.168.2.6	199.232.210.172
Oct 18, 2024 12:10:44.310580969 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.311347961 CEST	80	60710	199.232.210.172	192.168.2.6
Oct 18, 2024 12:10:44.311431885 CEST	60710	80	192.168.2.6	199.232.210.172
Oct 18, 2024 12:10:44.336621046 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.341583014 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.368166924 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.373298883 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.399116993 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.404227972 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.436027050 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.441488028 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.472209930 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.477730036 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.495057106 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.500490904 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.524235010 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.548608065 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.548666000 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.553711891 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.570987940 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.577492952 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.587249994 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.592421055 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.617887974 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.623049974 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.633362055 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.638309956 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.649104118 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.654117107 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.665309906 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.670454979 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.695831060 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.700828075 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.711394072 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.716316938 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.727085114 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.732098103 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.742976904 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.749283075 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.758390903 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.763313055 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.775012016 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.780016899 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.805572033 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.818888903 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.836524963 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.845479012 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.852741957 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.859721899 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.883671999 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.890443087 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.914808989 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.920073986 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.933309078 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.939263105 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.961891890 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.973556042 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.977924109 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.986160994 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:44.992675066 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:44.998467922 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.008492947 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.014180899 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.024456978 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.029678106 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.040604115 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.045701027 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.055285931 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.064502954 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.071101904 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.097942114 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.098016024 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.126279116 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.126354933 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.146596909 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.146662951 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.160157919 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.160232067 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.168591022 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.168663979 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.173898935 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.180313110 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.186029911 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.195928097 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.202626944 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.211544991 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.219909906 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.227612019 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.235773087 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.242738962 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.255364895 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.258676052 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.274642944 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.274751902 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.283257008 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.289602041 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.301404953 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.305289030 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.319977999 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.321415901 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.330915928 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.336565971 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.343642950 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.352086067 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.358664989 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.367727995 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.373264074 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.383361101 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.391685963 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.399029970 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.404433966 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.415307999 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.420588017 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.430396080 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.435631037 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.445799112 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.450818062 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.461442947 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.466526031 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.477087021 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.491578102 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.492671013 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.515464067 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.515522003 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.547278881 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.547343016 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.552366972 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.555217981 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.560398102 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.570811987 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.587014914 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.587080002 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.596616983 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.602499008 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.607805967 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.617989063 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.625670910 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.633383036 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.643114090 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.649010897 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.686378002 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.686439991 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.723134041 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.723200083 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.743344069 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.743413925 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.749022961 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.758304119 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.763556004 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.774065018 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.779560089 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.789609909 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.794714928 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.805793047 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.814529896 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.820856094 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.844834089 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.844906092 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.858468056 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.858608961 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.866692066 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.867691040 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.873183966 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.883382082 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.890541077 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.899528980 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.904733896 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.914524078 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.919555902 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.930291891 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.935590029 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.945844889 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.951910973 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.961472988 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:45.975505114 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:45.977145910 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.012962103 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.013094902 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.055903912 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.055988073 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.078701973 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.078875065 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.085745096 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.087084055 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.093548059 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.102061987 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.111465931 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.117742062 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.124336004 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.133399010 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.141148090 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.149009943 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.155848026 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.164715052 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.169894934 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.180674076 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.185779095 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.195909977 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.200862885 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.211448908 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.216691017 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.227077961 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.232294083 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.242763042 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.248261929 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.258318901 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.264442921 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.274681091 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.279866934 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.289571047 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.294632912 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.305535078 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.311120987 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.320930004 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.325920105 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.336815119 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.341818094 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.353089094 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.359370947 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.368720055 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.386401892 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.386461973 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.421266079 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.424560070 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.458689928 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.460748911 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.472950935 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.476541042 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.482250929 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.484529972 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.490533113 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.492855072 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.498692989 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.508373022 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.514556885 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.523950100 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.553848028 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.556548119 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.561461926 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.570856094 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.576692104 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.586560965 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.591759920 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.602212906 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.607150078 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.617718935 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.622952938 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.633359909 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.639202118 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.649640083 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.654663086 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.664644957 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.670069933 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.680401087 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.685312986 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.695787907 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.700819969 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.711497068 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.716535091 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.727061033 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.732587099 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.743290901 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.748259068 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.758281946 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.774290085 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.774357080 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.813739061 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.813791037 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.846265078 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.846330881 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.882150888 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.882211924 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.897046089 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.897119045 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.903717995 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.903798103 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.910039902 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.914527893 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.919763088 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.930799007 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.935815096 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.945796967 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.951122999 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.961433887 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.970225096 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.977117062 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:46.991027117 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:46.992750883 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.003006935 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.008302927 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.021543980 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.024195910 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.038017988 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.039684057 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.045645952 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.055253983 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.061549902 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.070878029 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.077143908 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.086546898 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.091865063 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.102118969 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.110150099 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.118355989 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.126409054 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.133368969 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.145442963 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.148914099 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.167969942 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.168064117 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.191210985 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.191308975 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.219542980 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.219649076 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.239382029 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.239461899 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.248249054 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.248322010 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.254288912 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.258308887 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.264442921 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.273963928 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.279985905 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.289674997 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.296793938 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.305990934 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.311340094 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.320804119 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.326422930 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.336505890 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.341861010 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.352066994 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.357414961 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.368329048 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.373286009 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.383399963 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.388535976 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.399759054 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.404752016 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.414762974 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.419996977 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.430244923 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.435322046 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.445769072 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.451215982 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.461577892 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.466603994 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.477178097 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.482228041 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.493128061 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.498281956 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.508363962 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.513787031 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.524069071 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.541318893 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.541537046 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.574449062 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.574593067 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.622364044 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.622539043 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.651657104 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.651783943 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.657512903 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.664805889 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.669634104 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.680876017 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.686187029 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.696033955 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.700918913 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.729073048 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.734986067 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.743223906 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.748276949 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.758363962 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.763211966 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.774113894 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.779052973 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.790319920 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.795573950 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.805380106 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.810338020 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.820862055 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.843738079 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.843801022 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.888845921 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.888945103 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.912787914 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.912852049 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.940243006 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.940344095 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.948455095 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.948530912 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.956408024 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.961420059 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.966434956 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.977731943 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.982758045 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:47.992676020 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:47.999232054 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.008271933 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.025796890 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.025846004 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.038188934 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.039546013 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.055761099 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.056010008 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.073298931 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.073386908 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.086108923 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.086417913 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.098469019 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.102154016 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.113141060 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.117700100 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.131088018 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.133311033 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.141387939 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.148936033 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.156563044 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.164994001 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.170380116 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.180228949 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.185831070 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.195880890 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.202961922 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.211425066 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.216984034 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.227135897 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.233499050 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.242697954 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.247617960 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.258666039 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.271353960 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.273899078 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.289427042 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.289608002 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.297379971 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.305250883 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.310434103 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.320805073 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.326086998 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.336436033 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.341550112 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.352782011 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.358910084 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.367851019 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.390348911 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.390486002 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.428757906 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.428865910 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.487041950 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.487179995 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.504501104 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.504581928 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.513932943 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.513988018 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.561743021 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.561809063 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.566998959 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.571162939 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.576417923 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.586416960 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.591510057 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.602315903 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.607603073 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.617958069 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.623420000 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.633740902 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.638845921 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.649447918 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.654644012 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.664879084 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.669882059 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.680413961 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.685393095 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.696029902 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.701108932 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.712445974 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.719549894 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.727574110 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.732484102 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.816148996 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.821290970 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.837121964 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.842439890 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.854908943 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.860032082 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.869328976 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.874398947 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.888657093 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.893701077 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.903825998 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.908804893 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.921680927 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.926681042 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.946322918 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.951581955 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.963392019 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.968571901 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.977051973 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:48.981913090 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:48.995425940 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.000452995 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.009313107 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.014448881 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.024130106 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.029078960 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.030817032 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.030883074 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.064238071 CEST	61000	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.069166899 CEST	15647	61000	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.071013927 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.076061010 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.076178074 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.076368093 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.081640959 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.086646080 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.092125893 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.102094889 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.107014894 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.117687941 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.123267889 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.133732080 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.138886929 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.148968935 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.153834105 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.164635897 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.169552088 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.180232048 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.185200930 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.195836067 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.200835943 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.211374998 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.216511011 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.227509022 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.232489109 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.242697954 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.247797012 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.258538961 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.265393972 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.273960114 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.280415058 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.289657116 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.295141935 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.305161953 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.310961008 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.321305990 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.326309919 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.336402893 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.341499090 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.352019072 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.357512951 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.367763996 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.374281883 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.383270025 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.389467001 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.400523901 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.405538082 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.415124893 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.420182943 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.430212021 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.435281038 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.445820093 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.450975895 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.461620092 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.466979027 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.477102995 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.484268904 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.492835045 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.497872114 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.508640051 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.513746977 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.523997068 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.537585974 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.539593935 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.544614077 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.555115938 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.560729027 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.570816040 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.575747967 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.586421013 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.591406107 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.602583885 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.609263897 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.617636919 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.623020887 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.633244991 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.638819933 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.648897886 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.653909922 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.664541960 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.669549942 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.680212021 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.685211897 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.696408987 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.701620102 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.711419106 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.717052937 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.727046967 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.732460022 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.742645979 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.747668982 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.758311033 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.766098976 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.774060965 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.780436039 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.789911032 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.795651913 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.805319071 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.811834097 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.820770979 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.838665009 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.838707924 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.865425110 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.866588116 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.882251978 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.884541035 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.898448944 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.899065018 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.913181067 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.914617062 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.933830976 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.936541080 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.952450991 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.955578089 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.961716890 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.961783886 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.967011929 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.977384090 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.982742071 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:49.992665052 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:49.998600960 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.008357048 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.013753891 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.024002075 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.031742096 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.039594889 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.046308994 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.055221081 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.060771942 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.071274996 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.076488972 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.086402893 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.091814041 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.102056980 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.107232094 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.118135929 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.119930029 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.123316050 CEST	15647	61001	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.125698090 CEST	61001	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.140110016 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.145742893 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.145839930 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.146116018 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.153914928 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.164732933 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.190656900 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.190738916 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.203939915 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.203990936 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.210969925 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.212666988 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.217926025 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.227325916 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.233475924 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.243014097 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.259155989 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.259310007 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.277432919 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.277504921 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.295280933 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.295334101 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.305737972 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.305798054 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.312185049 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.320863962 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.326400042 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.336745977 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.341890097 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.352101088 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.358066082 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.368096113 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.377667904 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.384012938 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.392642975 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.399110079 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.410132885 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.414629936 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.420430899 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.430362940 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.435477018 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.445811033 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.450692892 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.463088989 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.468889952 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.477404118 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.482870102 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.492657900 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.507523060 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.510929108 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.546904087 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.550604105 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.585073948 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.586741924 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.604042053 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.604260921 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.612415075 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.617686987 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.626123905 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.633255959 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.640069962 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.649164915 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.654865980 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.664901972 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.670244932 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.680254936 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.686610937 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.695822001 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.700793982 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.711400032 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.717741966 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.727109909 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.732944965 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.742986917 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.750514030 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.758829117 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.769664049 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.773956060 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.782278061 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.790508986 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.795767069 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.805491924 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.810620070 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.820799112 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.825815916 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.836865902 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.841722012 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.852822065 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.860560894 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.867780924 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.879734039 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.883446932 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.908770084 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.908857107 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.936853886 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.936950922 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:50.979325056 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:50.979399920 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.013320923 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.013427019 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.020210028 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.024573088 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.029685020 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.039977074 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.045981884 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.055161953 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.060667992 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.070851088 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.076487064 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.086421013 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.094890118 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.102066994 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.107348919 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.121848106 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.126996040 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.133693933 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.139760971 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.149002075 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.154234886 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.166555882 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.172254086 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.180464983 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.208672047 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.212599993 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.253438950 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.256624937 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.276051998 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.276163101 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.284296036 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.289722919 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.298420906 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.306094885 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.311723948 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.321552038 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.327071905 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.336709023 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.342065096 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.352272987 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.664556980 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.733901024 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.733917952 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.734019041 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.739464998 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.742331982 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.747596979 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.758466959 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.763454914 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.774121046 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.779689074 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.789901018 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.799880028 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.805574894 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.828614950 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.830773115 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.844903946 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.844997883 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.866928101 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.867024899 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.885126114 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.885226011 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.896578074 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.899791002 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.906688929 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.914608002 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.921433926 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.930231094 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.935174942 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.945838928 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.950867891 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.961477041 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.966536999 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.977267981 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:51.982362986 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:51.993364096 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.001353979 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.008416891 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.013748884 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.023941040 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.029128075 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.039577961 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.045675039 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.055210114 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.060313940 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.071161032 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.077480078 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.086976051 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.107906103 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.107985973 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.165608883 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.165716887 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.214565039 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.214658022 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.231942892 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.232017040 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.238615036 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.242860079 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.248677969 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.258558035 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.263612986 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.274586916 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.280091047 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.289741039 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.294984102 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.305253029 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.313036919 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.320859909 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.326090097 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.336708069 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.342257977 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.352329969 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.357563019 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.368396997 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.373845100 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.383445024 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.388885021 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.398962975 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.404861927 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.414803028 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.419775009 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.430248022 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.440233946 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.446101904 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.454529047 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.462028027 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.468228102 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.477116108 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.485259056 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.492881060 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.500545979 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.508380890 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.563395023 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.564563990 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.570080042 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.572550058 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.586493015 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.588562012 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.624697924 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.627438068 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.648140907 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.648680925 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.676565886 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.678621054 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.688522100 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.691308022 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.696336031 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.699487925 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.704540014 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.711437941 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.716648102 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.727277040 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.732273102 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.743422031 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.748389006 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.758405924 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.763545990 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.774090052 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.779139042 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.789578915 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.795056105 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.805202007 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.810230970 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.821034908 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.825974941 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.837387085 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.842303038 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.852087975 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.857234001 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.876141071 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.881091118 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.884150028 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.889296055 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.898885965 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.904012918 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.915062904 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.920542955 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.930799007 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.938546896 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.945847034 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:52.966782093 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:52.966826916 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.000785112 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.000902891 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.023278952 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.023335934 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.035190105 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.035247087 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.042788982 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.042836905 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.048470974 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.055175066 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.062210083 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.070806980 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.075994968 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.086447001 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.091999054 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.102421045 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.107346058 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.118030071 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.123920918 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.133260012 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.138495922 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.148874044 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.154325962 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.164506912 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.169852972 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.180460930 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.186376095 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.196027040 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.200874090 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.222687960 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.229085922 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.232536077 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.239758015 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.242641926 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.265573978 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.268548012 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.335920095 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.336569071 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.376029968 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.376554966 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.381484985 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.384238958 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.389796019 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.399327040 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.404500961 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.414587975 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.419629097 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.430272102 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.435343981 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.445769072 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.462285995 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.464462042 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.481213093 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.481283903 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.496947050 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.496999979 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.516930103 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.516999960 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.545156956 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.545219898 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.550340891 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.555156946 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.560710907 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.570981026 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.576035976 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.586818933 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.594873905 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.602032900 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.607605934 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.617645979 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.639693022 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.639765978 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.667846918 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.668050051 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.682419062 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.682486057 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.690238953 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.695807934 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.701149940 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.712274075 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.717782974 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.727035999 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.732634068 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.742649078 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.747679949 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.758400917 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.766520977 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.774322033 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.785780907 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.789557934 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.802753925 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.805203915 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.820854902 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.821058989 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.837567091 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.837707043 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.842792988 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.852052927 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.859234095 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.868391037 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.874808073 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.883790016 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.892309904 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.898945093 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.905379057 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.914820910 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.922271967 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.930136919 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.935729980 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.945774078 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.950864077 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.961812019 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.968854904 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.977191925 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.985060930 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:53.992718935 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:53.998929977 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.008294106 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.016176939 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.024171114 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.033962011 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.039525032 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.064470053 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.064557076 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.087706089 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.087762117 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.105693102 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.105767012 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.114830971 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.118499041 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.124066114 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.133447886 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.138977051 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.149322033 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.154983997 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.164673090 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.175808907 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.180396080 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.194715023 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.195982933 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.215569973 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.215629101 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.235817909 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.235877037 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.251980066 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.252058029 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.266294003 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.266419888 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.276312113 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.276386023 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.284729958 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.289582014 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.296889067 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.305272102 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.311528921 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.320802927 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.328946114 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.336844921 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.343451023 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.352250099 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.358952999 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.367625952 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.376046896 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.383277893 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.402401924 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.402479887 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.433823109 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.433891058 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.445224047 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.445780993 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.451181889 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.461407900 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.466715097 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.477054119 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.484432936 CEST	15647	61002	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.492660999 CEST	61002	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.508796930 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.542893887 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.543004036 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.543250084 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.551513910 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.555984974 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.561249018 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.571218014 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.576328993 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.586585999 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.592010975 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.602046967 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.610176086 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.617706060 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.623461008 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.633342028 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.638725042 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.649000883 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.655729055 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.664995909 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.671252012 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.680151939 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.687156916 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.696064949 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.702857018 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.711401939 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.717087030 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.727893114 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.732963085 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.742660999 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.749937057 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.758677006 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.764225960 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.773914099 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.778939962 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.789772034 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.795243979 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.805247068 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.811037064 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.822487116 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.828124046 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.836429119 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.841511965 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.852596998 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.857492924 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.867669106 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.873967886 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.883507967 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.889991999 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.898942947 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.904352903 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.915574074 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.923803091 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.930378914 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.935522079 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.946346045 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.953105927 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.961517096 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.966696978 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.977286100 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.982552052 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:54.992702007 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:54.998676062 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.009133101 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.014710903 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.023915052 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.028867006 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.041186094 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.047019005 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.055246115 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.060458899 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.070843935 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.078227043 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.086438894 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.094763041 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.102029085 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.112576008 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.117655039 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.134516954 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.134582043 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.163767099 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.163830996 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.201417923 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.201478958 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.214931011 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.214993000 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.224482059 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.227581024 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.232856035 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.242785931 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.247993946 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.258567095 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.263637066 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.274535894 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.287184954 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.289694071 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.295037031 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.306060076 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.311691046 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.321270943 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.327394962 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.336389065 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.342905045 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.352102995 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.361938000 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.368063927 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.385082960 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.385153055 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.398211956 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.399903059 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.407705069 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.415237904 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.423187971 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.430520058 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.435697079 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.445849895 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.451011896 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.461662054 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.467380047 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.477041006 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.482445002 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.493598938 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.498795986 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.509002924 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.514290094 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.523957968 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.549356937 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.549402952 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.583740950 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.586872101 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.623665094 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.626449108 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.639899015 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.639955997 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.648333073 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.648905039 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.660568953 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.664504051 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.717560053 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.717628956 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.733824968 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.733880043 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.740395069 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.742872000 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.748460054 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.758440018 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.763531923 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.773940086 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.779087067 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.790263891 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.795445919 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.805227995 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.811100006 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.820893049 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.837312937 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.837376118 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.854629993 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.855009079 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.860064983 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.868525982 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.873660088 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.884762049 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.890150070 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.899981022 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.905041933 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.916007996 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.928258896 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.933432102 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.959428072 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.959528923 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:55.981858969 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:55.981964111 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.029189110 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.029256105 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.076246023 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.081839085 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.101150036 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.101304054 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.106834888 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.106940031 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.118905067 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.119208097 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.124897003 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.133281946 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.156141996 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.158575058 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.165186882 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.199191093 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.206487894 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.214864016 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.220036030 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.228004932 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.234976053 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.244498968 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.251451015 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.261492014 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.267589092 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.279478073 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.286315918 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.294563055 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.299763918 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.305540085 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.310734034 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.323698044 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.337553978 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.342565060 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.364007950 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.391974926 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.404598951 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.404737949 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.412050009 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.424515009 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.429650068 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.431731939 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.436716080 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.446836948 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.452378035 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.464524984 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.473870993 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.479453087 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.489619970 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.495131016 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.501348972 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.508801937 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.516453981 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.524235010 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.556849003 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.557137012 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.562576056 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.571712971 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.576795101 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.586568117 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.591615915 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.602437973 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.607542038 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.620533943 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.626246929 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.634983063 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.640105009 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.648931980 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.653915882 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.667131901 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.673229933 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.680321932 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.685616016 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.699155092 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.705754995 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.715174913 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.721108913 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.727334976 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.733864069 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.742887974 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.748045921 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.758299112 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.765157938 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.773930073 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.779153109 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.790211916 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.795312881 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.805172920 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.810188055 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.820808887 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.825798035 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.836536884 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.847217083 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.852051973 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.868978977 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.869074106 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.896193981 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.896266937 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.937983036 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.938055038 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.962093115 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.962179899 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.974809885 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.977756023 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.983292103 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:56.992666006 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:56.999504089 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.008268118 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.013314962 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.024290085 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.029426098 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.039904118 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.044991970 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.055171013 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.063158989 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.071356058 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.087876081 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.087939978 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.116559029 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.116626978 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.175736904 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.175820112 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.195914030 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.195962906 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.201425076 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.211431980 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.217278957 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.227035046 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.233705997 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.242664099 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.247852087 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.258651018 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.263544083 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.273935080 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.279030085 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.289557934 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.294457912 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.305149078 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.310048103 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.320779085 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.325700045 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.336393118 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.341383934 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.352406979 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.357959032 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.367790937 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.373256922 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.383336067 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.388724089 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.399153948 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.405581951 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.414587021 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.458369970 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.458431959 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.506453991 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.506551027 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.551415920 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.551496983 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.557944059 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.558012009 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.564096928 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.570859909 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.576615095 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.586448908 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.591794968 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.602040052 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.607084036 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.617676973 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.634934902 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.634996891 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.680598974 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.680679083 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.726883888 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.726982117 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.745377064 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.746592045 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.752655983 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.758328915 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.763323069 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.773916960 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.779788017 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.789611101 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.795239925 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.805183887 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.820621014 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.824609041 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.867758989 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.867834091 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.897249937 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.897326946 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.912333965 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.912439108 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.917527914 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.917598963 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.924279928 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.932523012 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.940213919 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.947561026 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.955573082 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.961632967 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.967468023 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.977063894 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:57.993814945 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:57.993891954 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.029607058 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.029674053 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.061667919 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.061728954 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.083087921 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.083204031 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.090048075 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.090126038 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.095973969 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.102446079 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.107722998 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.118587017 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.123677969 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.133275032 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.138598919 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.148932934 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.165201902 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.168606997 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.178380966 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.180608034 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.185816050 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.196175098 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.201335907 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.212546110 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.217873096 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.228524923 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.233839035 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.244530916 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.249641895 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.260524988 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.265747070 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.276527882 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.281940937 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.289990902 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.294944048 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.308527946 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.320386887 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.324526072 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.375226021 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.375349045 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.412935972 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.416626930 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.433228016 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.437335014 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.452471018 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.452558994 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.461035013 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.461652040 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.468568087 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.480520964 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.486746073 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.492897987 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.498964071 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.508512020 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.514017105 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.524534941 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.559674978 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.560579062 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.568104029 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.572627068 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.578866959 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.588525057 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.594840050 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.604533911 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.610491037 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.617788076 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.623589993 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.633524895 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.647141933 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.648994923 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.674079895 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.674146891 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.716653109 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.716754913 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.744708061 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.751616955 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.758222103 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.817284107 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.827759027 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.827888966 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.839447975 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.839504957 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.858783007 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.858839989 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.879281998 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.879363060 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.894705057 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.894778013 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.905993938 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.906045914 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.911318064 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.921737909 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.926845074 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.936031103 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.942925930 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.946787119 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.957593918 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.966234922 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.981184959 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.981694937 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:58.998034954 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:58.998097897 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.011790037 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.016056061 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.025866985 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.031609058 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.042457104 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.042505980 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.055828094 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.055886984 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.068809032 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.070898056 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.080471039 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.086430073 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.092371941 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.102631092 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.107918024 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.118113995 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.123152971 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.133378983 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.138667107 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.149102926 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.155589104 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.165560961 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.170748949 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.180355072 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.186014891 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.196683884 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.202416897 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.211472034 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.218028069 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.227178097 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.233405113 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.242880106 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.247920990 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.258291006 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.265532017 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.273932934 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.308676958 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.308727980 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.364780903 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.364844084 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.398354053 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.398468018 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.422700882 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.422755003 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.435971022 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.436023951 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.442572117 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.445796967 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.452091932 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.462032080 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.467302084 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.477896929 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.484090090 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.493410110 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.498416901 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.508625031 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.513602972 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.523981094 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.549216986 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.549391985 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.557593107 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.557672977 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.564148903 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.571418047 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.576791048 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.586488008 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.591584921 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.602181911 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.607394934 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.617677927 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.623090029 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.633302927 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.638205051 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.649209976 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.656531096 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.665663004 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.674283028 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.680288076 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.689248085 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.695816994 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.728535891 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.728594065 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.762661934 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.762726068 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.794923067 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.796622038 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.803036928 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.808521032 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.814326048 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.824529886 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.829993010 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.836529970 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.842001915 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.852814913 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.859482050 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.868530989 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.884676933 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.884798050 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.909399986 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.909485102 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.951348066 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.952599049 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:10:59.986511946 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:10:59.988639116 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.001173973 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.004635096 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.009812117 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.012644053 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.017620087 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.023888111 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.030538082 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.040118933 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.045202017 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.055208921 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.060139894 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.071578026 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.081367970 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.086488008 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.097654104 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.102525949 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.107820988 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.117671967 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.122631073 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.133924961 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.139847040 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.149039984 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.162066936 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.164926052 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.201647043 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.201809883 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.238169909 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.238285065 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.262625933 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.262809992 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.290412903 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.290535927 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.317703009 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.317771912 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.334779024 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.334882975 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.359688997 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.359770060 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.374663115 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.374746084 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.393985987 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.394063950 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.415746927 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.415843010 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.439199924 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.439277887 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.464904070 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.468559980 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.484663963 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.484770060 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.493488073 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.493614912 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.501863956 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.508775949 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.518378019 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.524527073 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.556478977 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.556552887 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.569581985 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.571067095 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.591976881 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.592637062 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.599287987 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.602658987 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.608221054 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.617696047 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.626415968 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.636521101 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.649271965 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.652614117 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.673573017 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.676709890 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.701812983 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.705907106 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.707103968 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.707262039 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.716535091 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.720532894 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.725939035 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.725981951 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.726061106 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.732537031 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.733232021 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.733623028 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.738245010 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.738410950 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.744525909 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.752528906 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.755800962 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.761301994 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.767061949 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.775171041 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.775213003 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.775558949 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.781464100 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.790334940 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.798996925 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.807837009 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.808582067 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.808804035 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.817768097 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.827003956 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.836011887 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.841209888 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.841420889 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.849307060 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.860131025 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.880537033 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.885601044 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.885744095 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.894659996 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.903402090 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.911979914 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.918251038 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.918463945 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.927704096 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.936400890 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.945146084 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.954001904 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.963161945 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.964180946 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:00.964353085 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.970444918 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.978080034 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.984400034 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:00.992024899 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.001241922 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.005350113 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:01.005441904 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.013889074 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.022232056 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.030235052 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.038584948 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.047889948 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.048902035 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:01.049180984 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.061975956 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.092539072 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:01.092881918 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.117335081 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.129092932 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.137958050 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:01.138107061 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.171010971 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.179454088 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:01.179555893 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.201088905 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.212414026 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:01.212503910 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.246920109 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.255095959 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:01.255203009 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.267231941 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.280138969 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.287877083 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:01.287997961 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.298181057 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.306376934 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.312990904 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.320149899 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:01.320326090 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.328138113 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.335895061 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.343765974 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.351824999 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.356717110 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:01.356949091 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.362339973 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.370357990 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.377414942 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.383856058 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.389974117 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.390924931 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:01.391115904 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.396254063 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.400976896 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.404530048 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.408262968 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.412031889 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.416604996 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.423763990 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:01.726973057 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:01.731936932 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:02.336530924 CEST	61003	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:02.396769047 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.038398981 CEST	15647	61003	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.038913965 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.043728113 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.050152063 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.051239014 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.056163073 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.056233883 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.061352015 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.061450958 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.066335917 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.066418886 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.071329117 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.071410894 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.076518059 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.076597929 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.081531048 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.081619978 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.086405993 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.086481094 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.086530924 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.091345072 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.091428041 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.096327066 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.096412897 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.101424932 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.101505041 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.106580973 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.106682062 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.111567974 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.111654997 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.116754055 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.116967916 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.121757030 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.122397900 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.122474909 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.122833967 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.122889996 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.126977921 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.127073050 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.127562046 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.127625942 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.127712965 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.131939888 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.132050037 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.132616043 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.132678986 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.137206078 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.137303114 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.143522978 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.148423910 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.148533106 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.156630993 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.169954062 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.189506054 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.189651012 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.258380890 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.263335943 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.263416052 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.329742908 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.329859972 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.377381086 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.377525091 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.425487995 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.425571918 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.473386049 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.490614891 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.541420937 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.541583061 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.607280016 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.674154043 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.749335051 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.749428988 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.799041986 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.799120903 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.829881907 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.835123062 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.835253954 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.859766006 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.872093916 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.877403021 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.877743959 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.892863989 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.900806904 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.912816048 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.917929888 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.918184996 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.924813986 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.930946112 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.937892914 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.945394993 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.954859972 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.966110945 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:03.966270924 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:03.996728897 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.002105951 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:04.002248049 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.008085012 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.014687061 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.021140099 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.028924942 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.033936024 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.038953066 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.045393944 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.045564890 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:04.048635960 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.056404114 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.063000917 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.067951918 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.075594902 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.082360983 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.087249041 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:04.087646008 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.088375092 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.094429970 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.101124048 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.107731104 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.112804890 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.117736101 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:04.118094921 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.118293047 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.124303102 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.129081011 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.161534071 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:04.161782026 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.168302059 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.174082994 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.178802013 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.184844971 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.189847946 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.196064949 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.203141928 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.207961082 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.213418007 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.218333006 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:04.219893932 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.226072073 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.233553886 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.239659071 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.244635105 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.248414993 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.251988888 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.255817890 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.255834103 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:04.256712914 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.261665106 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.267492056 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.273888111 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.279892921 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.284126997 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.287060976 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:04.288650990 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.333359957 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:04.680164099 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:04.685184956 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:05.383263111 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:05.388782024 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:06.789506912 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:06.794503927 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:09.289659977 CEST	61005	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:09.294553995 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.542510033 CEST	15647	61005	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.598484993 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.603389978 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.603473902 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.603871107 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.609560966 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.609663963 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.615873098 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.615994930 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.621018887 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.621098042 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.626250982 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.626327038 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.631124020 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.631196976 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.636042118 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.636125088 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.640899897 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.640989065 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.645801067 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.645873070 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.652890921 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.652966976 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.659811974 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.659889936 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.664820910 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.664897919 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.671411991 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.671504974 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.676403999 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.676477909 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.681436062 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.681523085 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.686314106 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.686391115 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.691342115 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.691425085 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.696412086 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.696470022 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.701324940 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.701392889 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.706351995 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.706424952 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.711178064 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.711246014 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.716073036 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.716145992 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.720988989 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.721059084 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.725928068 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.725999117 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.731317043 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.731374025 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.737294912 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.737355947 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.742528915 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.742608070 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.748011112 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.748056889 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.752919912 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.752976894 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.757915020 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.757961988 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.762902975 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.762950897 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.767854929 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.767919064 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.772964954 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.773020029 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.777956963 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.778009892 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.783058882 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.783126116 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.788079977 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.788130999 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.793127060 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.793196917 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.797991991 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.798044920 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.803250074 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.805253029 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.810400963 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.810631037 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.815433979 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.818856955 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.824376106 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.826621056 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.831653118 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.834794044 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.839615107 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.842608929 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.847438097 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.850750923 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.855753899 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.858576059 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.863657951 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.866729975 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.871783018 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.874583960 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.879534960 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.882692099 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.887710094 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.907622099 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.912533045 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.914702892 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.919780016 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.923017979 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.928055048 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.930942059 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.935816050 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.939023972 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.944067955 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.944144011 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.948978901 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.949053049 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.953872919 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.953947067 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.958843946 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.962938070 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.967835903 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.971040010 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.976077080 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.977085114 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.982045889 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.982875109 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.987879992 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.990618944 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:11.995775938 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:11.998964071 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.004641056 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.006589890 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.011539936 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.014987946 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.019967079 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.022671938 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.027595997 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.027673006 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.032628059 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.032696009 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.037714005 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.037802935 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.042701960 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.042804003 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.047868967 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.047971964 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.053014040 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.053097963 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.058363914 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.058418036 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.063330889 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.063381910 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.068844080 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.071319103 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.077296019 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.077384949 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.082283020 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.083585024 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.088587046 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.088660955 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.093564987 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.093636990 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.098658085 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.099119902 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.104173899 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.104249001 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.109234095 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.109308004 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.114500046 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.114567995 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.119628906 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.119687080 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.124783039 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.124857903 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.130032063 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.130125999 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.135461092 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.135524988 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.140862942 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.140923977 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.146512032 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.146595955 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.151593924 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.151674986 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.156544924 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.158611059 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.163499117 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.163583040 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.168498993 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.170622110 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.175616026 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.175698996 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.180675983 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.182616949 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.187527895 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.187623978 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.192498922 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.194705963 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.235135078 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.240206003 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.242676973 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.281636000 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.284710884 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.333658934 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.337322950 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.338766098 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.385603905 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.386712074 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.433247089 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.437259912 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.440639973 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.479635000 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.484608889 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.488756895 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.525489092 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.527800083 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.568721056 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.573554993 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.573671103 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.621258020 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.621431112 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.667592049 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.669306040 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.669389009 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.713483095 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.713574886 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.761282921 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.761432886 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.805821896 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.809432030 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.809500933 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.851336002 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.853308916 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.893522024 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.897474051 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.899080992 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.947463036 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.947937965 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.990504026 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:12.993314028 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:12.994960070 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.034130096 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.037341118 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:13.038691044 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.076442003 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.081480980 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:13.083108902 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.123936892 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.128854036 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:13.130752087 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.169337988 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:13.171679974 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.217861891 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.221385002 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:13.222894907 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.265343904 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:13.265455961 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.317344904 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:13.317452908 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.359009981 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.363974094 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:13.366581917 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.405316114 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:13.405567884 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.447916985 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.452781916 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:13.456641912 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.493402958 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:13.496433973 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.541846037 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.545418024 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:13.548738956 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.591331959 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.594408035 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:13.637365103 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:13.639533043 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.681806087 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.688528061 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:13.692749023 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.733345985 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:13.735630035 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.778618097 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.781339884 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:13.784619093 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.825367928 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:13.825526953 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.868208885 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.873205900 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:13.873347998 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.914383888 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:13.914494038 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:13.965384007 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:13.965487003 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.005711079 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.010679960 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:14.010833025 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.053456068 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:14.053622961 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.100440025 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.105511904 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:14.105607033 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.148503065 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.149384975 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:14.193783998 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.197457075 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:14.237030029 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.241390944 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:14.286587000 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:14.286757946 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.333280087 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:14.333364010 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.377872944 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.381370068 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:14.421422005 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.425787926 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:14.425864935 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.469176054 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.469253063 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:14.517851114 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:14.517941952 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.565393925 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:14.565481901 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.617378950 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:14.617466927 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.665467024 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:14.665612936 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.704005003 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.708966970 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:14.709218979 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.749413013 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:14.749569893 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.795612097 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.797328949 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:14.797404051 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.841296911 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:14.841387033 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.888417006 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.889378071 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:14.889457941 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.935210943 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.938503981 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:14.981026888 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:14.981309891 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:15.029383898 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:15.030803919 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.076570988 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.081322908 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:15.084624052 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.125329971 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:15.127768040 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.171402931 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.173422098 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:15.173499107 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.217281103 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.217493057 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:15.263478994 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.265321970 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:15.313311100 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.313389063 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:15.361255884 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:15.364010096 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.409622908 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:15.410742044 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.454377890 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.459538937 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:15.462759972 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.501481056 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:15.502418995 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.543781996 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.548949957 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:15.552181959 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.589463949 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:15.591145039 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.632519960 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.637422085 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:15.638601065 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.685421944 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:15.686347961 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.728229046 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.733202934 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:15.734806061 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.777699947 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:15.777756929 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.821264029 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.825367928 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:15.825464010 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.869405031 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:15.869548082 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.913922071 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.917464018 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:15.959490061 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:15.961364031 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.002886057 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.005986929 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.049299955 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.049500942 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.092744112 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.097377062 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.097527027 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.141434908 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.141587019 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.188538074 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.189269066 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.189368010 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.229774952 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.235327959 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.235469103 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.274185896 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.277344942 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.313704967 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.318677902 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.318842888 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.365408897 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.365493059 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.417327881 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.417412996 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.458384037 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.464304924 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.464433908 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.502845049 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.505330086 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.543807030 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.549384117 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.549527884 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.589096069 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.593373060 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.593504906 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.633944035 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.639307976 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.639426947 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.681365013 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.681440115 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.734148979 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.734252930 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.777668953 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.781320095 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.781389952 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.823251009 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.828501940 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.828588963 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.867465973 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.869303942 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.910351992 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.913300037 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.949693918 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.954615116 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:16.993506908 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:16.997874022 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.038424969 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.041344881 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.085481882 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.085642099 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.125058889 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.130088091 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.130235910 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.173420906 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.177373886 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.177459955 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.215867996 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.220971107 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.221091986 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.263603926 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.265347958 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.265440941 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.310146093 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.313601017 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.356477022 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.357391119 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.405535936 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.405724049 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.454313040 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.457402945 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.457515955 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.501554966 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.501781940 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.549452066 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.549534082 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.594994068 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.597296953 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.637104034 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.641515017 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.641623020 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.682683945 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.685306072 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.685415983 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.725593090 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.729486942 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.773665905 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.773835897 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.817625999 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.821501970 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.821597099 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.862998962 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.865386963 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.908847094 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.913311958 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.913585901 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.956062078 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.957407951 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:17.957554102 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:17.999715090 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.004688978 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:18.004853010 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.045314074 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:18.045433998 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.093346119 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:18.093485117 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.143589973 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.145363092 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:18.189501047 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:18.189625025 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.231574059 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.236427069 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:18.236541033 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.281315088 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:18.281467915 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.329293013 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:18.329468012 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.377381086 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:18.377512932 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.425400019 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:18.425596952 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.473412037 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:18.473532915 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.521596909 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:18.521729946 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.569379091 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:18.631045103 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.677381992 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:18.677489042 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.725395918 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:18.725478888 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.773437023 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:18.773536921 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.817974091 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.821345091 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:18.821430922 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.860614061 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.865497112 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:18.865653992 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.907202005 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.912167072 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:18.912307978 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.952059984 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.953412056 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:18.993768930 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:18.997603893 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:18.997742891 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.039176941 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.041498899 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:19.089432955 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:19.089519024 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.137324095 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:19.137413979 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.181123972 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.185993910 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:19.186073065 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.229432106 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:19.229589939 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.271009922 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.275891066 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:19.276035070 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.314878941 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.317626953 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:19.358966112 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.363866091 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:19.363970041 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.409560919 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:19.409689903 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.452039003 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.456932068 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:19.457043886 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.501389027 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:19.501492977 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.543539047 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.548444986 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:19.548558950 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.586312056 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.589293957 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:19.626565933 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.631632090 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:19.631753922 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.672878981 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.677412987 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:19.719404936 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.724246979 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:19.724400043 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.765316010 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:19.765451908 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.806176901 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.811146975 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:19.853311062 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:19.853396893 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.901262999 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:19.901331902 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:19.953417063 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:19.953435898 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.005356073 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.005426884 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.034627914 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.057307959 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.057415009 CEST	61006	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.086869955 CEST	15647	61006	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.088809967 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.093713999 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.093796015 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.094012976 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.099014997 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.099082947 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.103962898 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.104048014 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.108963966 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.109646082 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.114530087 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.114617109 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.119551897 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.119637012 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.124511003 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.124584913 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.129492044 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.129584074 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.134390116 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.134491920 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.139415026 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.139487028 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.144360065 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.144444942 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.149343014 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.149424076 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.154248953 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.154331923 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.159358978 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.159430027 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.164340973 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.164405107 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.169178009 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.169353008 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.174170971 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.174225092 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.179217100 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.179270983 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.184372902 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.184436083 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.189367056 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.189419985 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.196342945 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.196399927 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.201437950 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.201499939 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.206491947 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.206546068 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.211493969 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.211549044 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.216423988 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.216487885 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.221716881 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.221786976 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.226691961 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.226751089 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.231700897 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.231762886 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.236669064 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.236815929 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.241720915 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.241775990 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.247025013 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.247076035 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.251987934 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.252054930 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.257052898 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.257122993 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.262090921 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.262149096 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.267072916 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.267134905 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.272559881 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.272609949 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.277587891 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.277637959 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.283111095 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.283171892 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.288078070 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.288129091 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.293200016 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.293256998 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.298234940 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.298293114 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.303212881 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.303283930 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.308183908 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.308244944 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.313193083 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.313261032 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.318212032 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.318269014 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.323227882 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.323299885 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.328361988 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.328421116 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.333405972 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.333461046 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.338686943 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.338738918 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.343736887 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.343808889 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.348937988 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.348999977 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.353964090 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.354048014 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.359060049 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.359123945 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.364048958 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.364141941 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.369076014 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.369148970 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.374125957 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.374188900 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.379138947 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.379210949 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.384126902 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.384227991 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.389183044 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.389255047 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.394610882 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.394684076 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.400240898 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.400360107 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.405354023 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.408909082 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.413888931 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.413959026 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.418836117 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.419111013 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.424550056 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.424644947 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.429585934 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.429727077 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.437278986 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.437388897 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.442253113 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.442348003 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.449285984 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.449392080 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.456357002 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.456478119 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.461399078 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.461473942 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.466350079 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.466423988 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.471381903 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.471467972 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.476682901 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.476778030 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.481961966 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.482074976 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.487024069 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.487236977 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.492234945 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.492306948 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.498521090 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.498580933 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.503611088 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.510241032 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.515136003 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.515198946 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.520040989 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.520095110 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.540406942 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.540486097 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.545525074 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.546571016 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.551456928 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.551508904 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.556380033 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.556451082 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.561377048 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.561439991 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.566451073 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.566500902 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.571461916 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.571528912 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.576419115 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.576493025 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.581451893 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.581525087 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.586437941 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.586520910 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.591394901 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.591480017 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.596559048 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.596641064 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.601483107 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.601558924 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.606403112 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.606467962 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.611462116 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.611565113 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.616461992 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.616535902 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.622520924 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.622586966 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.627587080 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.627656937 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.632695913 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.632770061 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.664206028 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.669123888 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.669228077 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.709002972 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.713367939 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.713458061 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.748537064 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.753458977 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.753658056 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.797394037 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.797480106 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.845412970 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.848756075 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.893913984 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.897387981 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.899610043 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.941337109 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.942672014 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.984739065 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:20.989806890 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:20.990669012 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.033529997 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.035758018 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.085433960 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.086085081 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.133351088 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.134665966 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.185395956 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.188631058 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.237349033 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.239631891 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.285450935 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.286681890 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.333478928 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.333564043 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.368565083 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.373526096 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.374663115 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.408830881 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.413809061 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.413918018 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.450862885 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.455969095 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.456727028 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.490295887 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.495215893 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.495620012 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.530142069 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.536436081 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.536643982 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.568236113 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.573184013 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.576637030 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.612731934 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.617463112 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.619618893 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.651341915 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.656423092 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.660685062 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.693474054 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.697365046 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.700615883 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.731909037 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.736852884 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.738795996 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.771351099 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.776417971 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.776647091 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.808798075 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.813692093 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.815634966 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.846976995 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.851821899 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.851939917 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.886657953 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.891509056 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.891638041 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.925080061 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.930164099 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.930296898 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:21.974498987 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:21.974581957 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.013005972 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.017950058 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.018076897 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.054800987 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.059752941 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.059919119 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.100909948 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.101389885 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.101463079 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.149126053 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.149338007 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.189148903 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.194176912 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.194338083 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.236078024 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.237312078 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.280030966 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.281430960 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.325380087 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.325548887 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.361023903 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.365979910 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.366115093 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.408225060 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.413475990 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.413657904 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.448893070 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.453771114 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.453871965 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.493642092 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.497292995 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.534126043 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.539345026 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.539500952 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.581412077 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.581578016 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.628957033 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.629322052 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.629393101 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.668282986 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.673193932 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.673350096 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.713486910 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.713583946 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.751041889 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.755942106 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.756114960 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.796976089 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.801354885 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.801420927 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.835733891 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.840708971 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.840805054 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.878566980 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.881371021 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.921336889 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.926337004 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:22.926426888 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.961103916 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:22.966337919 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.005984068 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.009399891 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.041327000 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.046906948 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.047049046 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.092952967 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.093389034 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.140638113 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.141467094 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.173223019 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.178230047 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.178370953 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.211154938 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.216766119 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.216886997 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.257432938 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.257698059 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.290508986 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.295523882 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.295680046 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.335822105 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.340728998 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.340837002 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.385462046 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.419262886 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.450525045 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.482104063 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.513907909 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.546245098 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.579823971 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.592319965 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.592441082 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.593735933 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.624530077 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.629503012 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.629797935 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.667900085 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.672760963 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.672848940 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.709913015 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.713268995 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.741099119 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.746598959 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.746712923 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.778026104 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.782905102 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.783010006 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.814680099 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.819570065 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.819683075 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.849927902 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.854959011 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.855079889 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.887039900 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.891876936 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.892002106 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.933327913 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.933482885 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.965254068 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:23.970405102 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:23.970640898 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.010879040 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.013465881 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.048924923 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.053966999 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.089076996 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.094796896 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.094932079 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.130460978 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.135490894 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.135622978 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.169301033 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.174341917 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.174499035 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.208913088 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.213886976 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.213963985 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.246373892 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.252299070 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.252394915 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.288146019 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.293401003 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.293557882 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.331012964 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.337104082 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.337248087 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.373431921 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.378492117 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.378603935 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.411681890 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.416831970 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.416960001 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.448640108 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.453567028 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.453744888 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.484601974 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.492116928 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.492254019 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.524940014 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.530637026 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.530792952 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.564450979 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.570187092 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.570326090 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.605992079 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.612559080 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.612682104 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.651272058 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.656112909 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.656230927 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.697365046 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.697442055 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.728302956 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.733319998 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.733403921 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.774221897 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.779828072 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.779900074 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.820087910 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.821393967 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.865972042 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.866106033 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.902220964 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.907774925 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.907933950 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.939986944 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.944979906 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:24.945121050 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.976027966 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:24.980957985 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.021369934 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.021471024 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.051238060 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.069339037 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.069514990 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.117360115 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.117432117 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.159132004 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.164093018 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.164275885 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.197906971 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.202821016 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.202969074 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.234944105 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.239897013 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.240010977 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.276369095 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.281347990 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.281426907 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.316042900 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.321005106 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.321095943 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.365367889 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.365556955 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.417314053 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.417412996 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.465080023 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.469317913 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.469405890 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.507287979 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.512285948 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.512423992 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.546227932 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.551354885 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.551472902 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.582331896 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.587280035 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.587415934 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.633373022 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.633496046 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.685306072 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.685441017 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.733419895 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.740103006 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.772492886 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.777451038 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.777599096 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.821405888 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.821559906 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.869504929 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.869673014 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.917376041 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.923757076 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:25.969734907 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:25.969887018 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.017446041 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:26.017585993 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.061373949 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.065480947 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:26.065557003 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.107914925 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.109464884 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:26.109575033 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.142391920 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.147411108 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:26.147526026 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.189122915 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.189302921 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:26.224909067 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.229800940 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:26.264004946 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.269031048 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:26.269157887 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.306379080 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.309659004 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:26.354121923 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.357321978 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:26.393150091 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.398372889 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:26.398557901 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.436366081 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.442464113 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:26.442676067 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.486248016 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:26.486453056 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.520940065 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.525937080 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:26.567449093 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.569272041 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:26.614062071 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.617292881 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:26.661380053 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:26.661485910 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.698698044 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.703567028 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:26.703708887 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.745409012 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:26.745613098 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.791294098 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.793332100 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:26.793500900 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.832494974 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:26.837340117 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:27.289573908 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:27.295030117 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:27.992624998 CEST	61007	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:27.997510910 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.589701891 CEST	15647	61007	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.602240086 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.607180119 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.607256889 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.607466936 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.612270117 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.612417936 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.617305994 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.617671013 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.622572899 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.622653008 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.627446890 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.627507925 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.632411957 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.632491112 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.637444019 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.637492895 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.642453909 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.642514944 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.647336960 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.647404909 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.652239084 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.652286053 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.657176971 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.657229900 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.662144899 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.662229061 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.667141914 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.667229891 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.672106028 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.672183990 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.677030087 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.677099943 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.681988001 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.682060003 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.687098026 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.687170982 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.692114115 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.692188025 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.697230101 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.697312117 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.702373028 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.702459097 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.707371950 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.707585096 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.712654114 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.712745905 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.717648029 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.717828989 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.722734928 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.722851992 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.727804899 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.727916956 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.732877970 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.732981920 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.737977982 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.738089085 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.743029118 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.747535944 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.752568960 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.752670050 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.757808924 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.757900953 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.762859106 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.762998104 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.767980099 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.768110991 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.773046017 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.773158073 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.778225899 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.778419018 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.783569098 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.783644915 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.788579941 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.788654089 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.793549061 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.793669939 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.798681021 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.798779964 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.803662062 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.803759098 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.808733940 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.808835030 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.813687086 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.813790083 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.818732977 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.818900108 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.823846102 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.824002028 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.828968048 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.829061985 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.833923101 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.833992958 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.838959932 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.839041948 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.843956947 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.844019890 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.848984003 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.849077940 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.854130030 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.854201078 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.859090090 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.859163046 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.864027023 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.864105940 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.868980885 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.869055986 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.874124050 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.876481056 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.881412029 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.881593943 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.886447906 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.886534929 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.891410112 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.891489029 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.896374941 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.896450996 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.901441097 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.901546955 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.906503916 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.906641960 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.911503077 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.911602974 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.916626930 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.916896105 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.921855927 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.921958923 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.926867962 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.927009106 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.931879044 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.931981087 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.936886072 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.937042952 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.941955090 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.942042112 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.946872950 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.946955919 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.951881886 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.952058077 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.957009077 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.957102060 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.962052107 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.962133884 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.967020035 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.967081070 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.971899986 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.971975088 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.976882935 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.976946115 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.981826067 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.981925011 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.986763954 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.986872911 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:28.991849899 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:28.998280048 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.003262997 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.003340006 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.008285046 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.008399010 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.013298988 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.013376951 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.018300056 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.018488884 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.023480892 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.023547888 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.028529882 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.028609037 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.033478975 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.033557892 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.038455963 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.038536072 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.043354988 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.043427944 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.048279047 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.048371077 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.053186893 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.053255081 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.058110952 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.058182955 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.063067913 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.063173056 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.068069935 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.068182945 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.073065042 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.073148012 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.078103065 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.078170061 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.083169937 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.083245993 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.088109970 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.088241100 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.093162060 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.093231916 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.098079920 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.098148108 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.103005886 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.103099108 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.108048916 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.108140945 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.113018990 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.113116980 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.117979050 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.118084908 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.122962952 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.123039007 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.127811909 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.127890110 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.132910013 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.132982016 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.137864113 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.137928009 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.142808914 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.142874956 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.147774935 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.147834063 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.152695894 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.152761936 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.157659054 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.157711029 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.162491083 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.162530899 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.209947109 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.210015059 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.246818066 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.251713037 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.251831055 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.293132067 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.293371916 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.334244013 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.339103937 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.339238882 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.379909039 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.381279945 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.381346941 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.420120001 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.425168037 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.425333977 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.465414047 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.465570927 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.505088091 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.509953976 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.510075092 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.552226067 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.553790092 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.593939066 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.597338915 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.635694981 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.640785933 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.640933990 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.680636883 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.681322098 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.719810009 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.724734068 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.724864006 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.766246080 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.769469023 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.809082985 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.813314915 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.813620090 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.855220079 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.857376099 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.857500076 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.900655031 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.905397892 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.948101997 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:29.949281931 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.993386984 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:29.993592024 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.035326958 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.040286064 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.040524006 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.083236933 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.085309982 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.085393906 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.129395962 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.129492998 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.173079967 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.177294970 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.221555948 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.225292921 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.269340992 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.269426107 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.314585924 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.319925070 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.320131063 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.364893913 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.365307093 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.404330015 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.409379005 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.409503937 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.441082001 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.446197033 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.446269989 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.478672981 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.483668089 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.483777046 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.515489101 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.521656990 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.521763086 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.553529024 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.558526039 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.558624029 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.598978996 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.601385117 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.632066011 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.637047052 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.637197971 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.670536995 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.675555944 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.675657988 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.706871986 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.711812973 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.711919069 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.744195938 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.749216080 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.749347925 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.781760931 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.786942005 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.787031889 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.819786072 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.825252056 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.825366974 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.857402086 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.862250090 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.862356901 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.896034002 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.900974989 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.901093960 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.941276073 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.941346884 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:30.993284941 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:30.993375063 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.036387920 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.041274071 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.041388988 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.072855949 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.077733994 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.113975048 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.118855953 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.118947029 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.156002045 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.160852909 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.160994053 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.198967934 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.205003977 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.205104113 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.237546921 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.242403984 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.242527962 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.283754110 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.285270929 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.327964067 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.329339027 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.373294115 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.373384953 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.419359922 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.424276114 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.424367905 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.458580971 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.463619947 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.463758945 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.505384922 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.505480051 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.542220116 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.547039032 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.547224998 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.589226007 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.593306065 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.593502045 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.636557102 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.637389898 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.677505970 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.682389021 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.721620083 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.725300074 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.760700941 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.765491009 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.765609980 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.806246042 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.809324980 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.846975088 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.851844072 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.885169983 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.890352011 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.890500069 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.933339119 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.933443069 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.976399899 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:31.981372118 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:31.981494904 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.021986961 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.025316954 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.069360018 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.069458961 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.109019995 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.114825010 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.114907980 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.151846886 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.156698942 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.156810999 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.194396973 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.197318077 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.230957031 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.235800982 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.235909939 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.277348042 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.277532101 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.321650028 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.326613903 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.326714039 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.364357948 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.369333982 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.369457006 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.407155037 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.412189960 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.412348032 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.453344107 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.453552008 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.487236023 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.492348909 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.492466927 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.533107042 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.533509970 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.533655882 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.581479073 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.581787109 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.629101038 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.629599094 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.677447081 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.677534103 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.729432106 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.729581118 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.781404018 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.781493902 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.828970909 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.829399109 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.873691082 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.877523899 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.915178061 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.920214891 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.920413971 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:32.961349010 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:32.961460114 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.009365082 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.009469986 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.043719053 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.048585892 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.048728943 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.089353085 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.089391947 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.129707098 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.134850979 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.134990931 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.170895100 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.175754070 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.175887108 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.216782093 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.217375040 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.256187916 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.261213064 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.261357069 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.300101995 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.305277109 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.349355936 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.349427938 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.387471914 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.393244982 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.393358946 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.429250956 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.436950922 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.437079906 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.471981049 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.478014946 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.478157043 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.518361092 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.521135092 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.568373919 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.568582058 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.617580891 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.617732048 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.665518045 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.665812016 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.713498116 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.713781118 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.761462927 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.761768103 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.806477070 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.811532974 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.811706066 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.856861115 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.857278109 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.905775070 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.905881882 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.942137957 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.947876930 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.947978020 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:33.993588924 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:33.993716955 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.038688898 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.043469906 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.043632030 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.085324049 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.085432053 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.126816034 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.131891012 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.173748016 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.177356005 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.177463055 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.221620083 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.221800089 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.251758099 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.269359112 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.269556999 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.317378998 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.317492962 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.361916065 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.365360022 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.409344912 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.409423113 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.449765921 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.455594063 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.455701113 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.494735956 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.497311115 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.532387018 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.537623882 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.537753105 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.577244043 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.582257986 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.582396984 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.621925116 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.625266075 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.625349998 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.665405989 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.669285059 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.669389963 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.710088015 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.714973927 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.747350931 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.752233028 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.793472052 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.793638945 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.832530022 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.837363958 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.837479115 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.877664089 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.881302118 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.881403923 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.923105001 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.925367117 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.925508976 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.966769934 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:34.969276905 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:34.969403982 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:35.006503105 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:35.011286974 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:35.492669106 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:35.497453928 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:36.180212021 CEST	61008	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:36.186191082 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.089060068 CEST	15647	61008	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.091424942 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.096405029 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.096551895 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.096971989 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.101723909 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.101876020 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.106807947 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.106940031 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.111771107 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.111872911 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.116698980 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.116784096 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.121655941 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.122051954 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.126941919 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.127026081 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.132761955 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.132854939 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.137645960 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.137751102 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.142642021 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.146966934 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.151928902 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.152139902 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.157002926 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.157145977 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.161998034 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.162097931 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.166941881 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.167167902 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.172019958 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.172139883 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.177041054 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.177340031 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.182188988 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.182272911 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.187161922 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.187294960 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.192167044 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.192260981 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.197153091 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.197901011 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.202807903 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.203140020 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.207994938 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.208933115 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.213893890 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.213973045 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.218908072 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.219031096 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.223912954 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.224046946 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.228985071 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.229273081 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.234082937 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.234159946 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.239015102 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.239168882 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.244261026 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.244461060 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.249335051 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.249460936 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.254440069 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.254645109 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.259749889 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.259845018 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.264791965 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.264935017 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.269893885 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.270194054 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.275126934 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.275243998 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.280359030 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.280505896 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.285603046 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.285748005 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.291692019 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.291815042 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.296705961 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.296806097 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.301702023 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.301853895 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.307028055 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.307131052 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.312143087 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.312403917 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.317949057 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.318037033 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.323802948 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.323988914 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.329343081 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.329583883 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.334745884 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.334932089 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.339956045 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.340114117 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.345859051 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.345983982 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.350842953 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.350938082 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.355799913 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.355916977 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.360793114 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.360892057 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.365782976 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.365941048 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.371391058 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.371507883 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.376487017 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.376661062 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.381493092 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.381704092 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.386590958 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.386733055 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.391649961 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.398480892 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.403336048 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.403414965 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.408426046 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.408534050 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.413420916 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.413572073 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.418507099 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.421178102 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.426151991 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.426390886 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.431421041 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.431524992 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.436496019 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.436623096 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.441751957 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.441879034 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.446916103 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.447024107 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.451925039 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.451994896 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.457005978 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.457132101 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.462071896 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.462503910 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.468558073 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.468660116 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.475780010 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.475938082 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.481014967 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.481127977 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.486129999 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.486227036 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.491204977 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.491296053 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.496416092 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.496545076 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.501493931 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.501594067 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.506541014 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.506650925 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.511475086 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.511667967 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.517102957 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.517179966 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.547243118 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.547348976 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.594619036 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.597318888 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.599775076 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.599929094 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.604904890 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.604984045 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.609780073 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.609903097 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.614845037 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.614988089 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.619915962 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.620167971 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.625020027 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.625118017 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.629942894 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.630101919 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.634928942 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.635077953 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.639939070 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.640060902 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.645191908 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.645323992 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.650315046 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.650413036 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.655332088 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.655425072 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.660621881 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.660727978 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.665688038 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.665818930 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.670845985 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.671030998 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.676098108 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.676269054 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.681232929 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.681337118 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.686255932 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.686393023 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.691274881 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.691356897 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.696607113 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.696700096 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.701652050 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.701740980 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.706746101 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.706815004 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.711754084 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.711832047 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.717080116 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.717164993 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.722035885 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.722110987 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.727202892 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.727282047 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.732297897 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.732391119 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.737418890 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.737608910 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.742530107 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.742607117 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.747579098 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.747649908 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.752814054 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.752901077 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.757960081 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.758060932 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.796531916 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.801594019 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.801728010 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.845366955 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.845490932 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.896542072 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.897469044 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.949479103 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.949604988 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:37.997423887 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:37.997545004 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.049242973 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.049362898 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.097295046 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.097419977 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.145430088 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.145551920 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.197346926 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.197489977 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.244246960 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.245372057 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.245532990 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.286753893 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.289299011 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.333297014 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.333429098 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.370186090 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.375134945 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.375288010 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.409044027 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.413980007 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.414112091 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.457295895 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.457465887 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.500200987 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.505074024 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.545608997 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.549340010 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.549439907 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.590152979 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.593298912 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.593425989 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.627247095 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.632365942 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.632494926 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.675959110 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.676081896 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.716115952 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.721332073 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.754962921 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.759968996 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.760066986 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.801456928 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.801615000 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.849270105 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.849373102 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.893978119 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.897749901 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.900655031 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.940392971 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.941340923 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.944658995 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.989274025 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:38.993330002 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:38.996654034 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.034543037 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.039364100 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.040652037 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.081018925 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.085417032 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.086639881 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.126817942 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.129323959 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.132642031 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.172045946 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.176871061 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.180648088 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.219707012 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.221297979 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.224620104 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.262063980 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.265284061 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.268631935 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.304646015 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.309288025 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.345823050 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.350769997 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.352644920 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.388092041 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.392911911 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.394670010 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.430068970 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.433341980 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.467916965 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.473968029 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.476267099 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.510624886 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.515620947 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.516649008 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.556775093 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.557429075 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.604023933 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.605290890 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.644396067 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.649430037 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.649595022 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.693362951 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.693453074 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.741410971 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.741533041 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.782210112 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.787211895 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.788676977 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.828588963 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.829313040 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.832639933 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.877336979 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.877473116 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.914829969 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.919822931 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.919918060 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.958106041 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:39.963087082 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:39.963212967 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.003082037 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.008121967 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.008281946 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.047492981 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.049530029 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.089312077 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.094269037 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.094429016 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.134417057 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.137362957 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.173103094 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.177952051 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.178117990 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.221287012 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.221427917 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.261809111 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.266715050 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.301855087 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.306699991 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.306837082 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.349386930 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.349524021 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.390005112 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.395107985 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.395312071 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.436361074 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.437362909 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.474128008 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.479055882 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.479175091 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.522468090 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.525315046 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.569385052 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.569531918 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.615328074 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.621258020 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.621400118 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.665412903 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.669348955 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.669450045 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.716723919 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.717602015 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.717686892 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.759022951 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.764110088 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.764250994 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.809335947 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.809504986 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.843739033 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.848609924 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.848742008 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.888019085 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.889380932 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.937334061 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.937468052 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.977479935 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:40.982322931 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:40.982424974 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.025362015 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:41.025481939 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.073316097 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:41.073400974 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.121273994 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:41.121362925 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.169442892 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:41.169545889 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.221328020 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:41.221462965 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.273339987 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:41.309660912 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.357520103 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:41.357629061 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.405354023 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:41.405436039 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.453329086 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:41.453474998 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.501321077 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:41.501476049 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.549387932 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:41.549523115 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.597414970 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:41.597564936 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.633893967 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.639033079 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:41.639147997 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.675189972 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.680016994 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:41.680145979 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.719439030 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.721396923 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:41.753828049 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.758831978 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:41.758969069 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.796797037 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.801311970 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:41.801419020 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.849442959 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:41.849534035 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.901420116 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:41.901531935 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.941070080 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.946078062 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:41.946213007 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.989522934 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:41.993334055 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:41.993478060 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.037337065 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.037482023 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.071563005 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.076489925 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.076579094 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.112715006 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.117424011 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.117532969 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.161408901 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.161633015 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.202989101 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.207932949 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.208070993 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.242526054 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.247322083 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.247437954 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.288484097 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.293349981 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.293524027 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.330368042 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.335238934 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.335355043 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.371609926 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.376600027 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.376676083 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.417315006 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.417383909 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.450391054 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.455423117 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.455502033 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.501353025 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.501418114 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.538328886 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.543317080 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.543431044 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.577528954 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.582523108 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.582624912 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.617202044 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.622059107 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.661686897 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.665373087 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.699362993 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.704361916 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.704488993 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.736942053 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.741971016 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.742109060 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.775722980 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.780628920 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.780772924 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.815177917 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.820453882 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.820554018 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.851977110 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.856870890 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.856990099 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.890788078 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.895724058 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.895836115 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.929512024 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.934325933 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.934525013 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.973823071 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:42.977348089 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:42.977418900 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.017124891 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.021274090 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.021410942 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.057631016 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.062587023 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.062684059 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.105393887 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.105492115 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.139216900 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.144315004 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.144419909 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.180147886 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.185055017 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.185152054 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.220447063 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.225442886 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.225548983 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.259784937 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.264861107 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.264966965 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.297552109 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.302526951 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.302671909 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.341386080 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.345385075 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.345560074 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.378650904 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.383668900 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.383774042 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.424137115 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.425276041 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.468833923 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.473377943 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.473484039 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.517280102 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.517601967 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.553891897 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.558696985 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.558811903 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.599256039 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.601411104 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.601461887 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.645325899 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.645420074 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.678272963 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.683048964 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.683151960 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.717456102 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.722290039 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.722444057 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.753950119 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.758821964 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.759006023 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.792062044 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.796900034 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.797044992 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.833133936 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.837559938 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.837635994 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.877008915 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.882011890 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.882189989 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.925376892 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.925636053 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:43.973295927 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:43.997256041 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:44.045439959 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:44.113162041 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:44.165302038 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:44.165400982 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:44.213323116 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:44.213485956 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:44.249346018 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:44.254308939 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:44.254473925 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:44.288192987 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:44.293289900 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:44.293479919 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:44.333709002 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:44.337301970 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:44.337511063 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:44.381753922 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:44.382087946 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:44.416768074 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:44.421644926 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:44.789526939 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:44.794554949 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.492697001 CEST	61010	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.497648001 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.586971998 CEST	15647	61010	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.590739012 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.595760107 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.595817089 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.595963001 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.600745916 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.600786924 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.605572939 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.605626106 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.610491991 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.610544920 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.615483046 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.615540028 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.620548964 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.620596886 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.625458002 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.625507116 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.630436897 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.630487919 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.635446072 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.635499001 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.640444994 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.640491962 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.645541906 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.645598888 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.650489092 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.650543928 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.656163931 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.656223059 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.661597013 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.661653042 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.666836023 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.666908026 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.672313929 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.672368050 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.677730083 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.677793980 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.682985067 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.707401037 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.712496042 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.712587118 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.717502117 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.717578888 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.722409964 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.722481966 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.727283955 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.727359056 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.732225895 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.732295990 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.737101078 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.737173080 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.742141962 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.742213011 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.747137070 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.747204065 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.752022028 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.752113104 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.757091045 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.757167101 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.762295961 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.762356997 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.767230034 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.767297983 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.772084951 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.772155046 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.776985884 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.777050018 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.781914949 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.781984091 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.786834955 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.787026882 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.791915894 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.792006016 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.797055006 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.797137022 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.802057028 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:45.802129984 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.834439993 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.871644020 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.909593105 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.951168060 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:45.989116907 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.007940054 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.007952929 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.008136988 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.008265972 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.012934923 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.016654015 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.021596909 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.023113012 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.028023958 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.028181076 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.033704042 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.053494930 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.058439970 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.060637951 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.065920115 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.068629026 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.073414087 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.076644897 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.081433058 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.084331989 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.089301109 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.092679977 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.097551107 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.100672007 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.105434895 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.108948946 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.113714933 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.113801956 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.118613958 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.120631933 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.125477076 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.127588987 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.132529020 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.133483887 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.138475895 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.139060974 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.143943071 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.146694899 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.152966976 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.155085087 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.159936905 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.162756920 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.167922020 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.171076059 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.176563025 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.179044962 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.183933020 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.187028885 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.191922903 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.195058107 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.199970007 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.203042030 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.246315956 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.249330997 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.251353025 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.255124092 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.301342964 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.301436901 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.353486061 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.354036093 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.401364088 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.403238058 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.449882030 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.452756882 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.501353025 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.504148006 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.549298048 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.552679062 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.601397991 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.829417944 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.834527016 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.834619999 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.839740992 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.843173027 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.848211050 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.860012054 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.865200043 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.865269899 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.870197058 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.880135059 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.885149956 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.885232925 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.890161991 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.890986919 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.895936012 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.896037102 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.901031017 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.901141882 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.905985117 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.906044006 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.910907030 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.911005974 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.916019917 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.916088104 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.920990944 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.921055079 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.925935984 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.926007032 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.930883884 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.930938005 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.935966015 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.936021090 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.970393896 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:46.975634098 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:46.975771904 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.016630888 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.021377087 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.060499907 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.065380096 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.065493107 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.104684114 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.109548092 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.153430939 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.153527975 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.190165043 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.195092916 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.195282936 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.237353086 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.237497091 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.285384893 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.285531044 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.319921970 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.324990988 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.325112104 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.360934973 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.365315914 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.365415096 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.397811890 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.402848005 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.403007030 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.441979885 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.445353031 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.489434958 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.489557981 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.535238028 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.540374994 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.540496111 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.581336021 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.581461906 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.623536110 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.628590107 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.628722906 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.669428110 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.669569969 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.714020967 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.717338085 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.717483044 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.765655041 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.765903950 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.813456059 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.813580036 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.861337900 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.861445904 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.909323931 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.909404993 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.950335979 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:47.955261946 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.997728109 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:47.997992992 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.040812969 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.045799017 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:48.089442015 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:48.089526892 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.137370110 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:48.137837887 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.185353994 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:48.185508013 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.233428955 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:48.233727932 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.281461000 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:48.281614065 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.328402996 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.329313993 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:48.371588945 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.376609087 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:48.376715899 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.417377949 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:48.417459965 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.462935925 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.465354919 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:48.509320974 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:48.509444952 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.549433947 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.554440975 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:48.554599047 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.595710993 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.597455025 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:48.634170055 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.639069080 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:48.639183998 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.680708885 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.681690931 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:48.681917906 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.723417997 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.728513956 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:48.728669882 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.769396067 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:48.769546032 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.820058107 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.821357965 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:48.821487904 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.869415045 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:48.869765997 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.919452906 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.921289921 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:48.921411037 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:48.965439081 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:48.965564966 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:49.013485909 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:49.013772011 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:49.061336040 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:49.108819962 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:49.157413960 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:49.157666922 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:49.205684900 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:49.205933094 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:49.257783890 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:49.257913113 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:49.305269957 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:49.305339098 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:49.353355885 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:49.415004015 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:49.461452007 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:49.461514950 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:49.509366035 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:49.509438038 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:49.557801008 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:49.558039904 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:49.605391979 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:49.605462074 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:49.648093939 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:49.653110981 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:49.653222084 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:49.693278074 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:49.693455935 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:49.740269899 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:49.745302916 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:49.745455980 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:49.789319992 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:49.789541006 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:49.833502054 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:49.837265968 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:49.885380030 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:49.885538101 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:49.933296919 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:49.933568954 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:49.981519938 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:49.981800079 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.026329041 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.030688047 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:50.030880928 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.073340893 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:50.073569059 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.115151882 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.120438099 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:50.120598078 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.162856102 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:50.162924051 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.206478119 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.219108105 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:50.219330072 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.262845993 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.272203922 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:50.272439957 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.324917078 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.325486898 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:50.365233898 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.372936964 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:50.373056889 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.414637089 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.417150021 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:50.455562115 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.489958048 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:50.490123034 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.533752918 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:50.533881903 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.582165956 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.588938951 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:50.589045048 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.629414082 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:50.629502058 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.672467947 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.683851957 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:50.683940887 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.735892057 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.743558884 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:50.743659019 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.785414934 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:50.785491943 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.831849098 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.834631920 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:50.877024889 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.908634901 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:50.910779953 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.949477911 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:50.949598074 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:50.998209953 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:50.998958111 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.040625095 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.045382977 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:51.048696041 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.094183922 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:51.096738100 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.159878016 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.216221094 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.223048925 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:51.227715969 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.269522905 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:51.272727013 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.321327925 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:51.321443081 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.369858980 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:51.369952917 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.424213886 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.424829960 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:51.478481054 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.532006979 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.542831898 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:51.544604063 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.577399015 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:51.580739975 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.629446983 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:51.632699013 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.681507111 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:51.683811903 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.731132984 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:51.732728004 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.783016920 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.809772015 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:51.812688112 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.862323046 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.875067949 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:51.876723051 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.921729088 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:51.921858072 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:51.969589949 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:51.969732046 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.020672083 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:52.020751953 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.071331024 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.073391914 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:52.119575024 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:52.119765997 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.181133986 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.181178093 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:52.181282997 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.233597040 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:52.233834028 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.286420107 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:52.286622047 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.350208998 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.361412048 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:52.361552000 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.406052113 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:52.406274080 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.457973003 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.464082003 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:52.464185953 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.508677006 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:52.508936882 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.565306902 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.572926998 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:52.573014021 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.613532066 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:52.613647938 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.666327000 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:52.666476965 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.715485096 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.717317104 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:52.761435032 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:52.761712074 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.811038017 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:52.811249971 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.865370035 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:52.865581989 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.913440943 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:52.913605928 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:52.961378098 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:52.961733103 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.018423080 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.021476030 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:53.073529005 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:53.073694944 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.121490955 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:53.121654987 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.171698093 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:53.171803951 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.234220028 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.241792917 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:53.241966009 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.291865110 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.299164057 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:53.299345970 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.347453117 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:53.347578049 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.397471905 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:53.397622108 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.445368052 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:53.445462942 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.497448921 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:53.497550964 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.561779976 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.575660944 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:53.575747967 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.649557114 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:53.649745941 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.704945087 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:53.705027103 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.761806965 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.768384933 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:53.768505096 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.810820103 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:53.810924053 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.861109972 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.886842966 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:53.886965990 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.934130907 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:53.936676979 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.983154058 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:53.988056898 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.029331923 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.032669067 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.080945015 CEST	61011	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.082282066 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.089611053 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.093344927 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.114219904 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.116178989 CEST	15647	61011	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.131865978 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.132388115 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.132884026 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.157437086 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.160849094 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.165858030 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.168644905 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.173542976 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.176656008 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.182262897 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.184670925 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.189536095 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.192646980 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.198764086 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.200649023 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.205585003 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.208640099 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.213526011 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.216610909 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.221714020 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.224762917 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.230228901 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.232625008 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.238087893 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.240647078 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.245528936 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.248670101 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.253577948 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.256819010 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.262310982 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.264638901 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.269610882 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.272722960 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.325865984 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.387829065 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.436043978 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.483377934 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.542273998 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.594398022 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.597850084 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.597867012 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.597872019 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.597876072 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.597978115 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.600150108 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.600167990 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.600178003 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.600188971 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.600198984 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.600208998 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.600219011 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.601572037 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.601759911 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.603837967 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.603890896 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.605334997 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.608684063 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.608740091 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.610637903 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.610708952 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.615500927 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.615789890 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.617677927 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.620843887 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.621110916 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.626256943 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.626341105 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.631413937 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.631587982 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.638051987 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.638114929 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.649610996 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.649900913 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.685762882 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.687098026 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.739550114 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.743107080 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.754635096 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.755110979 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.771677017 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.775110960 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.781399965 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.782993078 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.788096905 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.791589975 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.796489000 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.800651073 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.806010962 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.807080984 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.812941074 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.815062046 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.821738958 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.823059082 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.832819939 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.834686041 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.840545893 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.842664957 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.885090113 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.893625021 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.893709898 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.914697886 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.914931059 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.960225105 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:54.967605114 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:54.967700958 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.013504982 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:55.013597965 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.068938017 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:55.069075108 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.117516041 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.122675896 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:55.122801065 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.165419102 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:55.165546894 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.215771914 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:55.215980053 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.270117998 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.289591074 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:55.289729118 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.337429047 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:55.337565899 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.398235083 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:55.398422003 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.456690073 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.461476088 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:55.461613894 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.508269072 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:55.508455038 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.560571909 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.583477974 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:55.583589077 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.637531042 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:55.637650013 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.689380884 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:55.689591885 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.741770029 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.744158030 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:55.799218893 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:55.799376011 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.845365047 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:55.845510960 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.893670082 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:55.893748999 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.942481041 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:55.942560911 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:55.995822906 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:56.017865896 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:56.017982006 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:56.057607889 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:56.057713985 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:56.110995054 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:56.111099005 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:56.201749086 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:56.201855898 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:56.249478102 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:56.249608040 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:56.297470093 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:56.297574997 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:56.346100092 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:56.347346067 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:56.398364067 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:56.407067060 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:56.407206059 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:56.445537090 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:56.445678949 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:56.496077061 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:56.496218920 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:56.553509951 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:56.553761005 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:56.601620913 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:56.601882935 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:56.649561882 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:56.649912119 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:56.697341919 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:56.697444916 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:56.751007080 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:56.751111984 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:56.803631067 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:56.803728104 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:56.877983093 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:56.878097057 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:56.925551891 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:56.926570892 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:56.973783970 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:56.973929882 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.027518988 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.056140900 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:57.056550980 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.106184959 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:57.106343031 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.158046961 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:57.159854889 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.217886925 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:57.219000101 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.265532970 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:57.268680096 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.321140051 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.341768980 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:57.344712019 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.393429995 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:57.395657063 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.447868109 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:57.448008060 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.502306938 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.529401064 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:57.532675982 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.576721907 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.581587076 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:57.583102942 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.625468016 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:57.627989054 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.676135063 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.685518980 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:57.688126087 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.733905077 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:57.736699104 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.793674946 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:57.796710014 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.847253084 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.847878933 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:57.847966909 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.893567085 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:57.894131899 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.946996927 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:57.965361118 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:57.965513945 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:58.007481098 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:58.007565022 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:58.057568073 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:58.057651043 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:58.121591091 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:58.122056007 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:58.176376104 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:58.176475048 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:58.238857985 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:58.238979101 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:58.285479069 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:58.285557985 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:58.333379030 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:58.333452940 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:58.383878946 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:58.383940935 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:58.438651085 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:58.438740015 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:58.485444069 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:58.485498905 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:58.533585072 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:58.543024063 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:58.593767881 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:58.593846083 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:58.661453009 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:58.661550999 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:58.709683895 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:58.709791899 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:58.761512041 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:58.761615038 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:58.809427023 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:58.809535027 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:58.857397079 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:58.857546091 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:58.914608002 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:58.939062119 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:58.939189911 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:58.987387896 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.013439894 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:59.013624907 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.061475992 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:59.061608076 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.118324041 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.134552002 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:59.134804010 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.201451063 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:59.201668024 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.254276991 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:59.254369974 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.302575111 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.321609974 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:59.321777105 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.369826078 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:59.369939089 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.423969030 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.429131985 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:59.469430923 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:59.469522953 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.517503023 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:59.517656088 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.567630053 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:59.567809105 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.615930080 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.651365042 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:59.651582003 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.698304892 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.703453064 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:59.703603983 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.745464087 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:59.745563984 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.793407917 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:59.793495893 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.845361948 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:59.845508099 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.893634081 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:59.893781900 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.940239906 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:11:59.958415031 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:11:59.958523989 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.006983042 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.028065920 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:00.028213978 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.069914103 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:00.070070028 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.120517015 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:00.120646954 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.171549082 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.179580927 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:00.179773092 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.225367069 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:00.225512028 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.277535915 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:00.277631044 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.325313091 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:00.325429916 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.373406887 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:00.373517036 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.440591097 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.450887918 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:00.451014042 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.501347065 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.506321907 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:00.549455881 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:00.549530983 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.601603985 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:00.601687908 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.658274889 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.671339989 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:00.671416044 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.767884970 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.813669920 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.861598015 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.946058035 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:00.946162939 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.950025082 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:00.950077057 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:00.991497040 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:00.991693974 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:01.065644979 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:01.065768957 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:01.113651037 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:01.113750935 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:01.161464930 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:01.163957119 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:01.225450039 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:01.225533009 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:01.305490971 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:01.305572033 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:01.353594065 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:01.359613895 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:01.405462980 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:01.405565977 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:01.457571030 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:01.457637072 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:01.509913921 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:01.510060072 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:01.554831982 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:01.557600975 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:01.601455927 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:01.601747990 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:01.649471998 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:01.649629116 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:01.697329044 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:01.697447062 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:01.745404005 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:01.745760918 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:01.793261051 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:01.815814972 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:01.815943956 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:01.857619047 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:01.857722044 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:01.897887945 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:01.902993917 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:01.943010092 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:01.948127031 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:01.992202044 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:01.993436098 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.037925959 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.038049936 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.089603901 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.089690924 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.133861065 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.138870001 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.139020920 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.181444883 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.181552887 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.229367018 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.229579926 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.281418085 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.281615973 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.333388090 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.333522081 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.386214018 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.386342049 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.433532953 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.433727980 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.484890938 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.496819973 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.497039080 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.537467003 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.537646055 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.589781046 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.589936972 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.637777090 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.637957096 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.693947077 CEST	61012	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.717267036 CEST	15647	61012	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.727190971 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.732995033 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.733088017 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.733308077 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.738429070 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.738703012 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.744365931 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.744483948 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.750020027 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.750238895 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.755326986 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.755420923 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.761514902 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.761615038 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.766663074 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.766783953 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.772058010 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.772217035 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.777982950 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.778093100 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.783168077 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.783340931 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.788398981 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.788537025 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.794404030 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.794588089 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.799877882 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.800323009 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.805490017 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.809916019 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.815016985 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.815177917 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.820101976 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.820341110 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.825432062 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.825541973 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.830681086 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.830905914 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.835968971 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.838074923 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.843200922 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.843365908 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.848803043 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.848886013 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.854064941 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.854157925 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.859366894 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.859442949 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.864496946 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.864573956 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.869751930 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.869924068 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.875191927 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.875320911 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.880446911 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.880552053 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.885647058 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.886893988 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.891829967 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.891907930 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.897294998 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.897403002 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.902302980 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.902475119 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.912611008 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.912712097 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.918713093 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.918781042 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.923764944 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.923947096 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.929423094 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.929492950 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.937030077 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.937290907 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:02.952545881 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:02.952732086 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.004127026 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.004285097 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.057979107 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.070732117 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.071038008 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.075949907 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.076076031 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.076204062 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.081219912 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.081871033 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.086812973 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.087121964 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.092246056 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.092488050 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.098804951 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.100994110 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.106112003 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.106492043 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.111733913 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.111845016 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.116974115 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.117964983 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.123009920 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.123255014 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.128353119 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.128492117 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.133533001 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.133651018 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.138572931 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.138700008 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.143610001 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.148861885 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.153795004 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.153902054 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.159095049 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.159194946 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.164973021 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.165055990 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.170098066 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.170247078 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.175322056 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.175473928 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.180536985 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.180736065 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.185929060 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.186036110 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.191102982 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.191239119 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.196295023 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.197088003 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.202111959 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.202189922 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.208086014 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.208304882 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.215662956 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.215945959 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.227482080 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.227606058 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.241420984 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.241602898 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.253397942 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.253572941 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.258826971 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.258905888 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.263992071 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.264134884 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.277558088 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.277658939 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.319803953 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.320067883 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.352771044 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.353091955 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.403363943 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.403630972 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.449585915 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.449749947 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.455318928 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.455435038 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.461133003 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.461216927 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.466204882 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.466491938 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.471610069 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.471734047 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.477224112 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.477323055 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.483237028 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.483339071 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.488858938 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.503789902 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.508944988 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.509104013 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.514767885 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.514954090 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.520190001 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.520277023 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.527569056 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.527661085 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.569968939 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.570074081 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.617743969 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.617882967 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.665580034 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.665853977 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.733675003 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.741529942 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.741641045 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.803873062 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.803967953 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.853847027 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.894737959 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.945885897 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:03.946005106 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:03.998310089 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.003133059 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.063330889 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.096071959 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.146343946 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.163463116 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.213481903 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.213609934 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.261497021 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.261600971 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.310735941 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.310836077 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.357476950 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.357717991 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.404670954 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.405960083 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.453402042 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.453538895 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.503216982 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.503350973 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.553672075 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.605173111 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.656332016 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.707371950 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.760843039 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.835751057 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.892329931 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.892431021 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.893820047 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.893852949 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.893879890 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.893894911 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.893908024 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.893935919 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.893963099 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.893990040 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.894020081 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.894081116 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.894109011 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.894135952 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.894155025 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.894162893 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.898585081 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.898690939 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.902319908 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.902370930 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.902475119 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.945410967 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.945493937 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:04.993443966 CEST	15647	61013	91.240.118.154	192.168.2.6
Oct 18, 2024 12:12:04.993515968 CEST	61013	15647	192.168.2.6	91.240.118.154
Oct 18, 2024 12:12:05.045917034 CEST	15647	61013	91.240.118.154	192.168.2.6

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 18, 2024 12:09:13.975756884 CEST	1.1.1.1	192.168.2.6	0x30c0	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 12:09:13.975756884 CEST	1.1.1.1	192.168.2.6	0x30c0	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 18, 2024 12:09:25.407140017 CEST	1.1.1.1	192.168.2.6	0x2eff	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 12:09:25.407140017 CEST	1.1.1.1	192.168.2.6	0x2eff	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

Target ID:	0
Start time:	06:09:07
Start date:	18/10/2024
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\iieCxV2b1n.msi"
Imagebase:	0x7ff61ad30000
File size:	69'632 bytes
MD5 hash:	E5DA170027542E25EDE42FC54C929077
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	06:09:07
Start date:	18/10/2024
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\msiexec.exe /V
Imagebase:	0x7ff61ad30000
File size:	69'632 bytes
MD5 hash:	E5DA170027542E25EDE42FC54C929077
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	06:09:09
Start date:	18/10/2024
Path:	C:\Users\user\AppData\Local\Ormolu\ManyCam.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Ormolu\ManyCam.exe"
Imagebase:	0x400000
File size:	1'756'232 bytes
MD5 hash:	BA699791249C311883BAA8CE3432703B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	06:09:09
Start date:	18/10/2024
Path:	C:\Windows\System32\pcaui.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {bce4b583-343f-44b8-8f95-9f76104077b9} -a "ManyCam" -v "ManyCam LLC" -s "To work properly, this app must be reinstalled after you upgrade Windows." -n 4 -f 0 -k 0 -e "C:\Users\user\AppData\Local\Ormolu\ManyCam.exe"
Imagebase:	0x7ff6af320000
File size:	162'816 bytes
MD5 hash:	0BA34D8D0BD01CB98F912114ACC7CF19
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	06:09:10
Start date:	18/10/2024
Path:	C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe
Imagebase:	0x400000
File size:	1'756'232 bytes
MD5 hash:	BA699791249C311883BAA8CE3432703B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	06:09:10
Start date:	18/10/2024
Path:	C:\Windows\System32\pcaui.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {bce4b583-343f-44b8-8f95-9f76104077b9} -a "ManyCam" -v "ManyCam LLC" -s "To work properly, this app must be reinstalled after you upgrade Windows." -n 4 -f 0 -k 0 -e "C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe"
Imagebase:	0x7ff6af320000
File size:	162'816 bytes
MD5 hash:	0BA34D8D0BD01CB98F912114ACC7CF19
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	06:09:10
Start date:	18/10/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\cmd.exe
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000007.00000002.2447289622.0000000005680000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000007.00000002.2447289622.0000000005680000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	06:09:10
Start date:	18/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	06:09:34
Start date:	18/10/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Imagebase:	0x630000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	06:09:34
Start date:	18/10/2024
Path:	C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe"
Imagebase:	0x400000
File size:	1'756'232 bytes
MD5 hash:	BA699791249C311883BAA8CE3432703B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	06:09:34
Start date:	18/10/2024
Path:	C:\Windows\System32\pcaui.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {bce4b583-343f-44b8-8f95-9f76104077b9} -a "ManyCam" -v "ManyCam LLC" -s "To work properly, this app must be reinstalled after you upgrade Windows." -n 4 -f 0 -k 0 -e "C:\Users\user\AppData\Roaming\demoArchivebcz\ManyCam.exe"
Imagebase:	0x7ff6af320000
File size:	162'816 bytes
MD5 hash:	0BA34D8D0BD01CB98F912114ACC7CF19
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	06:09:35
Start date:	18/10/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\cmd.exe
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000E.00000002.2704945415.00000000056B0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 0000000E.00000002.2704945415.00000000056B0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	06:09:35
Start date:	18/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	06:09:56
Start date:	18/10/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Imagebase:	0xa20000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000011.00000002.2705147083.0000000000E22000.00000002.00000001.01000000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000011.00000002.2705147083.0000000000E22000.00000002.00000001.01000000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Function 00BC3C40 Relevance: 42.6, APIs: 28, Instructions: 644COMMON

Download Yara Rule

APIs

_CIpow.MSVCR80(?,?,?,?,?,?,?,?,?,?,?,00000001,?,00BC16C1,00000001), ref: 00BC3F18
_ftol.MSVCR80 ref: 00BC3F29
_CIpow.MSVCR80(?,?,?,?,?,?,?,?,?,?,?,00000001,?,00BC16C1,00000001), ref: 00BC3F4D
_ftol.MSVCR80 ref: 00BC3F5E
_CIpow.MSVCR80(?,?,?,?,?,?,?,?,?,?,?,00000001,?,00BC16C1,00000001), ref: 00BC3F82
_ftol.MSVCR80 ref: 00BC3F93
_CIpow.MSVCR80(?,?,?,?,?,?,?,?,?,?,?,00000001,?,00BC16C1,00000001), ref: 00BC3FB7
_ftol.MSVCR80 ref: 00BC3FC8
_CIpow.MSVCR80(?,?,?,?,?,?,?,?,?,?,?,00000001,?,00BC16C1,00000001), ref: 00BC3FEA
_ftol.MSVCR80 ref: 00BC3FFB
_CIpow.MSVCR80(?,?,?,?,?,?,?,?,?,?,?,00000001,?,00BC16C1,00000001), ref: 00BC401F
_ftol.MSVCR80 ref: 00BC4030
_CIpow.MSVCR80(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000001), ref: 00BC42A9
_ftol.MSVCR80 ref: 00BC42B8
_CIpow.MSVCR80(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000001), ref: 00BC42CC
_ftol.MSVCR80 ref: 00BC42DB
_CIpow.MSVCR80(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000001), ref: 00BC4358
_ftol.MSVCR80 ref: 00BC4367
_CIpow.MSVCR80(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000001), ref: 00BC438D
_ftol.MSVCR80 ref: 00BC439C
_CIpow.MSVCR80(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000001), ref: 00BC43C5
_ftol.MSVCR80 ref: 00BC43D4
_CIpow.MSVCR80(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000001), ref: 00BC43E8
_ftol.MSVCR80 ref: 00BC43F7
_CIpow.MSVCR80(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000001), ref: 00BC440B
_ftol.MSVCR80 ref: 00BC441A
_CIpow.MSVCR80(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000001), ref: 00BC442E
_ftol.MSVCR80 ref: 00BC443D

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Ipow_ftol
String ID:
API String ID: 36068165-0
Opcode ID: e01e8c9c86c397aba26647007420d209a8a1efc2df32461096426c6433c416fe
Instruction ID: 2c6f2aea685d68fb04b6c52704ddd9d9e95e4aad889363fad5910bec288d50a0
Opcode Fuzzy Hash: e01e8c9c86c397aba26647007420d209a8a1efc2df32461096426c6433c416fe
Instruction Fuzzy Hash: D752B034108B868BC3249F34C8557E6BFF1FF9A304F1589ADE4EA4B266DB319619C742

Function 00BDEC10 Relevance: 32.4, Strings: 25, Instructions: 1185COMMON

Download Yara Rule

Strings

%s: cannot handle zero number of %s, xrefs: 00BDF39B
%s: Seek error accessing TIFF directory, xrefs: 00BDECE7
%.100s: Can not read TIFF directory, xrefs: 00BDEDB5
%s: invalid TIFF directory; tags are not sorted in ascending order, xrefs: 00BDEFEC
StripByteCounts, xrefs: 00BDF7AE
to read TIFF directory, xrefs: 00BDED55, 00BDEE56
ImageLength, xrefs: 00BDF2E5
%s: cannot handle zero scanline size, xrefs: 00BDF9AD
%s: cannot handle zero strip size, xrefs: 00BDFA11
to read "TransferFunction" tag, xrefs: 00BDF4AA
Colormap, xrefs: 00BDF74D
%s: TIFF directory is missing required "%s" field, calculating from imagelength, xrefs: 00BDF7E5
%s: cannot handle zero tile size, xrefs: 00BDF9E6
tiles, xrefs: 00BDF38B
%s: Bogus "%s" field, ignoring and calculating from imagelength, xrefs: 00BDF8F2
%s: Can not read TIFF directory count, xrefs: 00BDED22, 00BDEE0A
StripOffsets, xrefs: 00BDF3F7, 00BDF3FC
TIFFReadDirectory, xrefs: 00BDEC80, 00BDECEC, 00BDED27, 00BDEDBA, 00BDEE0F, 00BDEEA3, 00BDEFF1, 00BDF05A, 00BDF138, 00BDF3A0, 00BDF7EA, 00BDF8F7, 00BDF9B2, 00BDF9EB, 00BDFA16
%s: unknown field with tag %d (0x%x) encountered, xrefs: 00BDF055
%s: Can not read TIFF directory, xrefs: 00BDEE9E
%s: wrong data type %d for "%s"; tag ignored, xrefs: 00BDF133
%s: Failed to allocate space for IFD list, xrefs: 00BDEC7B
PlanarConfiguration, xrefs: 00BDF311
strips, xrefs: 00BDF392, 00BDF397, 00BDF39A
TileOffsets, xrefs: 00BDF3F0

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID: %.100s: Can not read TIFF directory$%s: Bogus "%s" field, ignoring and calculating from imagelength$%s: Can not read TIFF directory$%s: Can not read TIFF directory count$%s: Failed to allocate space for IFD list$%s: Seek error accessing TIFF directory$%s: TIFF directory is missing required "%s" field, calculating from imagelength$%s: cannot handle zero number of %s$%s: cannot handle zero scanline size$%s: cannot handle zero strip size$%s: cannot handle zero tile size$%s: invalid TIFF directory; tags are not sorted in ascending order$%s: unknown field with tag %d (0x%x) encountered$%s: wrong data type %d for "%s"; tag ignored$Colormap$ImageLength$PlanarConfiguration$StripByteCounts$StripOffsets$TIFFReadDirectory$TileOffsets$strips$tiles$to read "TransferFunction" tag$to read TIFF directory
API String ID: 0-1977267626
Opcode ID: a4a4138263338d48967757696db8cc37458b1b2b8286b2abc847711a12695853
Instruction ID: cb901b7b96be73a8f058315553d7776f4b0be0bbed2cf4e467f3734cb19143bc
Opcode Fuzzy Hash: a4a4138263338d48967757696db8cc37458b1b2b8286b2abc847711a12695853
Instruction Fuzzy Hash: CA820175A087029BD324EB24D882AB7F3E5EF84314F1489BAE85B87342F735E945C791

Function 00BC7920 Relevance: 21.4, APIs: 14, Instructions: 420COMMON

Download Yara Rule

APIs

_CIpow.MSVCR80(?,?,?,?,?,?,?,?,?,00BC3DAF,?,?,00000008,00BAA3F8,00000001), ref: 00BC79BC
_ftol.MSVCR80 ref: 00BC79CD
_CIpow.MSVCR80(?,?,?,?,?,?,?,?,?,?,?,00BC3DAF,?,?,00000008,00BAA3F8), ref: 00BC7A2E
_ftol.MSVCR80 ref: 00BC7A3F
_CIpow.MSVCR80(?,?,?,?,?,?,?,?,?,?,?,?,?,00BC3DAF,?), ref: 00BC7AAE
_ftol.MSVCR80 ref: 00BC7ABF
_CIpow.MSVCR80(?,?,?,?,?,?,?,?,?,?,?,00BC3DAF,?,?,00000008,00BAA3F8), ref: 00BC7C53
_ftol.MSVCR80 ref: 00BC7C5C
_CIpow.MSVCR80 ref: 00BC7D5F
_ftol.MSVCR80 ref: 00BC7D70
_CIpow.MSVCR80 ref: 00BC7E3D
_ftol.MSVCR80 ref: 00BC7E4E
_CIpow.MSVCR80 ref: 00BC7F2D
_ftol.MSVCR80 ref: 00BC7F3E

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Ipow_ftol
String ID:
API String ID: 36068165-0
Opcode ID: 1f34cf84bbca2d782782982a5ab003975cc31764e641af23c31a9d931de2a1df
Instruction ID: 60a0208a52bebcc7ab1d5c45704fe39d185feabea66c9d1113485eeba29468ff
Opcode Fuzzy Hash: 1f34cf84bbca2d782782982a5ab003975cc31764e641af23c31a9d931de2a1df
Instruction Fuzzy Hash: A6028C70608B428BD314DF25D885B9BBBF5FFC8310F1149ADE4AA9B261DB30A855CB46

Function 0052309D Relevance: 21.1, APIs: 9, Strings: 3, Instructions: 70memorylibraryloaderCOMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(0000000C,?,0052317B,?,004086D8,?,00408648,0000000D,0040858E,00000000,?,?,00406405,0000040A,?,0000040A), ref: 005230A0
LoadLibraryA.KERNEL32(kernel32.dll,?,?,?,?,0052317B,?,004086D8,?,00408648,0000000D,0040858E,00000000,?,?,00406405), ref: 005230BA
GetProcAddress.KERNEL32(00000000,InterlockedPushEntrySList), ref: 005230D4
GetProcAddress.KERNEL32(00000000,InterlockedPopEntrySList), ref: 005230E1
GetProcessHeap.KERNEL32(00000000,00000008,?,?,?,?,0052317B,?,004086D8,?,00408648,0000000D,0040858E,00000000), ref: 00523113
HeapAlloc.KERNEL32(00000000,?,?,?,?,0052317B,?,004086D8,?,00408648,0000000D,0040858E,00000000,?,?,00406405), ref: 00523116
InterlockedCompareExchange.KERNEL32(?,00000000,00000000), ref: 0052312A
GetProcessHeap.KERNEL32(00000000,00000000,?,?,?,?,0052317B,?,004086D8,?,00408648,0000000D,0040858E,00000000), ref: 00523136
HeapFree.KERNEL32(00000000,?,?,?,?,0052317B,?,004086D8,?,00408648,0000000D,0040858E,00000000,?,?,00406405), ref: 00523139

Strings

InterlockedPopEntrySList, xrefs: 005230D6
InterlockedPushEntrySList, xrefs: 005230CE
kernel32.dll, xrefs: 005230B5

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Heap$AddressProcProcess$AllocCompareExchangeFeatureFreeInterlockedLibraryLoadPresentProcessor
String ID: InterlockedPopEntrySList$InterlockedPushEntrySList$kernel32.dll
API String ID: 3830925854-2586642590
Opcode ID: 045a139df42147dc29b3cf1c1bb3d0180b322a35e46f72030a23bd9566d498ff
Instruction ID: 6a309bd71f26a8b6476057eaf9253ffddd2ea6d6ddf4b4a8f55772e675858cee
Opcode Fuzzy Hash: 045a139df42147dc29b3cf1c1bb3d0180b322a35e46f72030a23bd9566d498ff
Instruction Fuzzy Hash: 7E11B276610228AFE7209F69FC899177FACFF66B51B008419F605C3250D7389814EB60

Function 00BD35A0 Relevance: 18.6, Strings: 14, Instructions: 1061COMMON

Download Yara Rule

Strings

Bad value %ld for "%s" tag ignored, xrefs: 00BD37E4
%s: Failed to allocate space for list of custom values, xrefs: 00BD410F
%s: Sorry, cannot nest SubIFDs, xrefs: 00BD3BDC
%s: Bad value %f for "%s", xrefs: 00BD4334
_TIFFVSetField, xrefs: 00BD3BE1, 00BD3E7C, 00BD3ECB, 00BD4236, 00BD429F, 00BD42DE, 00BD4339
%s: Invalid %stag "%s" (not supported by codec), xrefs: 00BD42D9
Nonstandard tile length %d, convert file, xrefs: 00BD3AE3
A, xrefs: 00BD4099
%s: Bad field type %d for "%s", xrefs: 00BD429A
%s: Bad value %ld for "%s", xrefs: 00BD3EC6
pseudo-, xrefs: 00BD42BE, 00BD42D7
%s: Pass by value is not implemented., xrefs: 00BD4231
Nonstandard tile width %d, convert file, xrefs: 00BD3AAB
%s: Bad value %d for "%s", xrefs: 00BD3E77

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID: %s: Bad field type %d for "%s"$%s: Bad value %d for "%s"$%s: Bad value %f for "%s"$%s: Bad value %ld for "%s"$%s: Failed to allocate space for list of custom values$%s: Invalid %stag "%s" (not supported by codec)$%s: Pass by value is not implemented.$%s: Sorry, cannot nest SubIFDs$A$Bad value %ld for "%s" tag ignored$Nonstandard tile length %d, convert file$Nonstandard tile width %d, convert file$_TIFFVSetField$pseudo-
API String ID: 0-984486836
Opcode ID: fe38d54aef40e276f7efd36a64583733266aff00e41178ff8bfc6bf13c28dd3e
Instruction ID: 0c47a158020cd68ac8c2f70b10fc69dfa8d5f38d4e3526d928b20a9c41f92c80
Opcode Fuzzy Hash: fe38d54aef40e276f7efd36a64583733266aff00e41178ff8bfc6bf13c28dd3e
Instruction Fuzzy Hash: 2882D2796046019FD310DF24D880A6AF7E0FF99708F1489AEE9599B352F731EA05CB93

Function 00523722 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 57COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 0052439E
_crt_debugger_hook.MSVCR80(00000001), ref: 005243AB
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 005243B3
UnhandledExceptionFilter.KERNEL32(00575E58), ref: 005243BE
_crt_debugger_hook.MSVCR80(00000001), ref: 005243CF
GetCurrentProcess.KERNEL32(C0000409), ref: 005243DA
TerminateProcess.KERNEL32(00000000), ref: 005243E1

Strings

!ME, xrefs: 00524352

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled_crt_debugger_hook$CurrentDebuggerPresentTerminate
String ID: !ME
API String ID: 3369434319-2242867602
Opcode ID: fa064457d980cb34010aba6a9c8ddec48f34fb03e7b2cf8e25b020562b0318d8
Instruction ID: 39ba21fb788a80fe4ca9cc942bdb85b36a6e35659692cabfea893639d5bd73cc
Opcode Fuzzy Hash: fa064457d980cb34010aba6a9c8ddec48f34fb03e7b2cf8e25b020562b0318d8
Instruction Fuzzy Hash: 9521B0B4901214DFE700DF69FD4E6457BB4FB2A308F10441AF508877A0E7B0568DAF15

Function 00BEBBB6 Relevance: 10.6, APIs: 7, Instructions: 57COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 00BEC2BF
_crt_debugger_hook.MSVCR80(00000001), ref: 00BEC2CC
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 00BEC2D4
UnhandledExceptionFilter.KERNEL32(00BF29FC), ref: 00BEC2DF
_crt_debugger_hook.MSVCR80(00000001), ref: 00BEC2F0
GetCurrentProcess.KERNEL32(C0000409), ref: 00BEC2FB
TerminateProcess.KERNEL32(00000000), ref: 00BEC302

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled_crt_debugger_hook$CurrentDebuggerPresentTerminate
String ID:
API String ID: 3369434319-0
Opcode ID: 597e02041e1bfba50f0337165b2f24eae0973a7523af19d09e68d6bc6f92a559
Instruction ID: 034f1efc45345c0b3af099b390a09b1a5bc54bb8f9d656cc2ad3de4a0fc7e974
Opcode Fuzzy Hash: 597e02041e1bfba50f0337165b2f24eae0973a7523af19d09e68d6bc6f92a559
Instruction Fuzzy Hash: AC21E2B4810289DFC700DF69FE98A68BFB6FB08300F10405AE508972A1EFB059C9CF09

Function 00488A00 Relevance: 7.6, APIs: 5, Instructions: 63COMMON

Download Yara Rule

APIs

FindResourceW.KERNEL32(00000000,0047AE1E,00000006,?,0047AE1E), ref: 00488A3B
GetLastError.KERNEL32(?,0047AE1E), ref: 00488A4A
SizeofResource.KERNEL32(00000000,00000000,?,0047AE1E), ref: 00488A5A
GetLastError.KERNEL32(?,0047AE1E), ref: 00488A67
GetLastError.KERNEL32(000000FF,00000000,00000000,00000000,00000000,00000000,?,0047AE1E), ref: 00488AA8

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: ErrorLast$Resource$FindSizeof
String ID:
API String ID: 1187693681-0
Opcode ID: 65827e7e1ba533ac49771d736c66928104eedf98d9c70884fcfb5a62a0082481
Instruction ID: c0cef2afab0bd7fe4f68a4e2e270c34d254ae90ade39b42375e279ad05fcd0b3
Opcode Fuzzy Hash: 65827e7e1ba533ac49771d736c66928104eedf98d9c70884fcfb5a62a0082481
Instruction Fuzzy Hash: 13215EB490410CAFDF04EFA8C894AAEBBB5AF58304F50855EF516E7380DB349A40DBA5

Function 004B7920 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 35windowCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,0050F176,00000000,?,?,?,?,?,?,4FF694EA), ref: 004B7929
FormatMessageW.KERNEL32(00001100,00000000,00000000,00000400,00000000,00000000,00000000), ref: 004B7951

Part of subcall function 004B77A0: fwprintf.MSVCR80 ref: 004B7842
Part of subcall function 004B77A0: fflush.MSVCR80 ref: 004B7852

GlobalFree.KERNEL32(00000000), ref: 004B797D

Strings

Error %lu(%XH): %s, xrefs: 004B7963

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: ErrorFormatFreeGlobalLastMessagefflushfwprintf
String ID: Error %lu(%XH): %s
API String ID: 800684769-2225916613
Opcode ID: 9c25a239c4296b40a1aac8e3427c21774919ee94bcf497bff91ff5139ac85dd7
Instruction ID: 92133e916cea4efcc1403b83aedde9febef4d0811e6201f309352de0de206619
Opcode Fuzzy Hash: 9c25a239c4296b40a1aac8e3427c21774919ee94bcf497bff91ff5139ac85dd7
Instruction Fuzzy Hash: 42F0AFB9E40208BBE714DBD4DC46F9EBB78AB58701F104159FB04A7280D7B06A45DBA5

Function 004164A0 Relevance: 6.1, APIs: 4, Instructions: 97filestringCOMMON

Download Yara Rule

APIs

Part of subcall function 00416650: FindClose.KERNEL32(55C35DE5,00000000,?,004164B1,00000000,000001E2,-0000012B), ref: 00416686

lstrlenW.KERNEL32(00000000,00000000,000001E2), ref: 004164C4
FindFirstFileW.KERNEL32(00000000,00000104,000000D8,00000104,00000000), ref: 004164F5
GetFullPathNameW.KERNEL32(00000000,00000104,?,00000000), ref: 0041652C
SetLastError.KERNEL32(0000007B), ref: 0041654D

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Find$CloseErrorFileFirstFullLastNamePathlstrlen
String ID:
API String ID: 333540133-0
Opcode ID: 171f62d7d2e46f7442e9afe65942f367c9dc7a9140c3c81f7060891864299191
Instruction ID: f4e42fcc4f8ec7ae6713741ac17fac935eec9a5453ba0a6ca1ec1d98cf041219
Opcode Fuzzy Hash: 171f62d7d2e46f7442e9afe65942f367c9dc7a9140c3c81f7060891864299191
Instruction Fuzzy Hash: 8E413AB0A00219AFDB00DFA4DC84BEE77B2BF44305F11856AE515AB385C778D984CB98

Function 004170D0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 36COMMON

Download Yara Rule

APIs

memset.MSVCR80 ref: 004170FB
GetVersionExW.KERNEL32(00000114), ref: 00417114

Strings

Z, xrefs: 0041713B

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Versionmemset
String ID: Z
API String ID: 3136939366-1505515367
Opcode ID: 516b4f2a042728e0f0f59f6a94ebabed824618c26df89cb6cf625fad9862a033
Instruction ID: 947a03641c50d36fa0e939df1043f0996d18235827ec97ca73ee9231d218b9cc
Opcode Fuzzy Hash: 516b4f2a042728e0f0f59f6a94ebabed824618c26df89cb6cf625fad9862a033
Instruction Fuzzy Hash: 63017C7094522C9BDF28CF60DD0A7D8B7B4AB0A305F0001EAD54926381DB785BD8CF89

Function 0050EC90 Relevance: 4.0, APIs: 3, Instructions: 229COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a7a71dcc478b47e40df8151f770de63c075e4e3c067fe5a625892b148f8ef34b
Instruction ID: b9a8476a3ded02214ffd1c961f0993893401f5a1c5ac13666dc1643a7a7c18ad
Opcode Fuzzy Hash: a7a71dcc478b47e40df8151f770de63c075e4e3c067fe5a625892b148f8ef34b
Instruction Fuzzy Hash: 5DB1FA7460424ADFCB04CF44C5959AEBBB2FF45344F248A99E8595B392C332EE52DF90

Function 004B2100 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 104comCOMMON

Download Yara Rule

APIs

Part of subcall function 00416740: _DebugHeapAllocator.LIBCPMTD ref: 00416795

Part of subcall function 00438A10: clock.MSVCR80 ref: 00438AA7
Part of subcall function 00438A10: _DebugHeapAllocator.LIBCPMTD ref: 00438AC5

CoCreateInstance.OLE32(?,00000000,00000001,00571980,00000000,?,?,0056F520,4FF694EA,?,?,?,?,00000000,005334CC,000000FF), ref: 004B21C6

Strings

CGraphMgr::AddFilterByCLSID name=%s, xrefs: 004B214A

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$CreateInstanceclock
String ID: CGraphMgr::AddFilterByCLSID name=%s
API String ID: 918117742-3942708501
Opcode ID: 80f2d3ddaa8d4aa783709a640ee3d22423abe0e31a3af0e214f939dcddfe5315
Instruction ID: 6627f4356a5c181cec56012d4899b026b21b0b7ca21db5bf76fe668c849b38a9
Opcode Fuzzy Hash: 80f2d3ddaa8d4aa783709a640ee3d22423abe0e31a3af0e214f939dcddfe5315
Instruction Fuzzy Hash: C2411C75900209EFDB08DF98D984BEEB7B4FB08314F10865EE815A7390DB74AA01CB64

Function 00BE619B Relevance: 2.7, Strings: 2, Instructions: 172COMMON

Download Yara Rule

Strings

, xrefs: 00BE619B
, xrefs: 00BE61BB

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID: $
API String ID: 0-227171996
Opcode ID: 139401f047a54c5d3154532d5224b38acaf183fe5f66e16f80429dc0e3e99564
Instruction ID: 80e632541e66174344fb7370549593c937a8c15ec49f1736bbf9217f3d29e2a2
Opcode Fuzzy Hash: 139401f047a54c5d3154532d5224b38acaf183fe5f66e16f80429dc0e3e99564
Instruction Fuzzy Hash: E451E4B06087468BD728CF5AE89022AFBE1FFD4350F544A7ED48687741D775E849CB82

Function 00523077 Relevance: 2.5, APIs: 2, Instructions: 12memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000000,00416AB4,00523168,00416AB4,0041507C,00415062,?,00415062,00416AB4,?,00416AB4,?,?,?,?), ref: 00523087
HeapFree.KERNEL32(00000000,?,00415062,00416AB4,?,00416AB4,?,?,?,?), ref: 0052308E

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Heap$FreeProcess
String ID:
API String ID: 3859560861-0
Opcode ID: 441a53b93ebf16eed188891ea13d12f94a6ae03e7d81ddeafca47d4340301828
Instruction ID: f319b3c51e495ac70aa74a2a88efa86c29433e891e0bee9a04cda8eb8d13ba05
Opcode Fuzzy Hash: 441a53b93ebf16eed188891ea13d12f94a6ae03e7d81ddeafca47d4340301828
Instruction Fuzzy Hash: D1D00274914214AFDE11ABA8AE8EA493B7ABF65702F504840F216D61A1D7399848FA21

Function 00BD16C0 Relevance: 2.2, Strings: 1, Instructions: 969COMMON

Download Yara Rule

Strings

@, xrefs: 00BD1C92

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID: @
API String ID: 0-2766056989
Opcode ID: 3fa8951f2940d12dc94979624d177cde631ba41340da961c35e27d68b5f1a77f
Instruction ID: 54bd0ffca3fc783a1cd1fb384354b938e432403ede5a0049982a7dd700d8ee58
Opcode Fuzzy Hash: 3fa8951f2940d12dc94979624d177cde631ba41340da961c35e27d68b5f1a77f
Instruction Fuzzy Hash: FF72A3756082469FC718CF28C49066AFBE2EFD9304F198ABEE995CB355E630DD42CB41

Function 00BC31B0 Relevance: 2.0, Strings: 1, Instructions: 718COMMON

Download Yara Rule

Strings

`, xrefs: 00BC3561

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID: `
API String ID: 0-2679148245
Opcode ID: 1ffc9d91de1d7451dcb28e8bb8d5ee26e24ee8602e7e186a2baa0cc19b091c42
Instruction ID: 3d6ad2fd1391315a2dfaf20bcec754001269db857c4a4468776e47f582cc9592
Opcode Fuzzy Hash: 1ffc9d91de1d7451dcb28e8bb8d5ee26e24ee8602e7e186a2baa0cc19b091c42
Instruction Fuzzy Hash: 3F528E756083828FC714CF28C880A5AFBF2AFC9704F5989ADE998D7311D771D945CB92

Function 00BE01C0 Relevance: 1.6, Strings: 1, Instructions: 383COMMON

Download Yara Rule

Strings

to fetch tag value, xrefs: 00BE0209, 00BE023A, 00BE026B, 00BE029C, 00BE02CD, 00BE02FE, 00BE032C

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID: to fetch tag value
API String ID: 0-3423917375
Opcode ID: 116aa9bc5b4149fee7464c8bedb5ce98c545642c396ebde22961d20dbcaa4080
Instruction ID: fb9875729e22311f2c7b3da4632827a90802e24d6568f41ab45afdc8dadf0832
Opcode Fuzzy Hash: 116aa9bc5b4149fee7464c8bedb5ce98c545642c396ebde22961d20dbcaa4080
Instruction Fuzzy Hash: F1B179616142825BD310BBA69CC1BBBB3E8EF55304F4800F9FD4886342F7959A95C6E5

Function 00BE9650 Relevance: 1.6, Strings: 1, Instructions: 376COMMON

Download Yara Rule

Strings

@, xrefs: 00BE9A47

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID: @
API String ID: 0-2766056989
Opcode ID: b69d900479a3808a0e431aeb8cc9e09774dd5d36545bdf75daaf8512864ae594
Instruction ID: 5090e71cc552b6c063cba722ae4e63dc4a6a3d11325611f092f0eb70cf63e302
Opcode Fuzzy Hash: b69d900479a3808a0e431aeb8cc9e09774dd5d36545bdf75daaf8512864ae594
Instruction Fuzzy Hash: 74E17B35A083818FC724CF29C4806AEB7E1FFD9354F2449ADE89597350EB75E949CB82

Function 00BDB130 Relevance: 1.6, Strings: 1, Instructions: 317COMMON

Download Yara Rule

Strings

No space for Palette mapping table, xrefs: 00BDB16C

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: AllocGlobal
String ID: No space for Palette mapping table
API String ID: 3761449716-3215607947
Opcode ID: 13dbac1d19e0fcec706794e3f50c23c24ef54470cad29d489643d4764cb4e374
Instruction ID: b39403220147f8b69a7911a3978ddf1e0a7c94ca69003b82ee0fc4f89a6a2dc6
Opcode Fuzzy Hash: 13dbac1d19e0fcec706794e3f50c23c24ef54470cad29d489643d4764cb4e374
Instruction Fuzzy Hash: 9FC19E71A19B434EE310CF59C8C0366FBE2FFD6315F1886B8D5A08B79AD2B99449C391

Function 00BD26F0 Relevance: 1.5, Strings: 1, Instructions: 241COMMON

Download Yara Rule

Strings

U, xrefs: 00BD27C3

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID: U
API String ID: 0-3372436214
Opcode ID: d06a82b991ce4754ee4d6933da77f2c0cf392789228a3c13f634902435b0714b
Instruction ID: b474fa9219401ed4cf5b0c49b6a19695f36b1ebcc6ca252ed9e6dc2f63368ead
Opcode Fuzzy Hash: d06a82b991ce4754ee4d6933da77f2c0cf392789228a3c13f634902435b0714b
Instruction Fuzzy Hash: BC818131A083918FC325CF29D49026AFBE1EFE9310F584AAEE9D587351E676DC45CB81

Function 00BE640B Relevance: .9, Instructions: 862COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93ee2c8e5d92acf01840040ed1768cd9ab5d59fa2de0fb0a40ca0dfc54a72f6c
Instruction ID: 45b01c4476b8487093e92bdb804de55d935098b0aff6be46ad568b4c169e2997
Opcode Fuzzy Hash: 93ee2c8e5d92acf01840040ed1768cd9ab5d59fa2de0fb0a40ca0dfc54a72f6c
Instruction Fuzzy Hash: 18727D70A08B868FC718CF1AD89066AF7E2FFD8344F14896DE58687754E771E849CB81

Function 00BC55F0 Relevance: .6, Instructions: 587COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc5ad7d822a4c71bc9fd73d8960d9994576aeaef53c3de34bd0ed5aa9e9f781b
Instruction ID: 1a2c01f700e244c7c9105ee7dbc9ba65d6d599e427f17d3d78e0123307ca214d
Opcode Fuzzy Hash: dc5ad7d822a4c71bc9fd73d8960d9994576aeaef53c3de34bd0ed5aa9e9f781b
Instruction Fuzzy Hash: C032913550C7828FC325CF28C4916AAFBE1FF99304F184ABDE4C98B342C621E985CB95

Function 00BE5C10 Relevance: .6, Instructions: 580COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a4cdff022733ea635cc14cf85c2be6a9f2afe8c267299d20e397900b0bcf9aad
Instruction ID: 4cc24a5403f6ad3430f213f06e729f6b1a2423c055067fa7a0f816425d5a693e
Opcode Fuzzy Hash: a4cdff022733ea635cc14cf85c2be6a9f2afe8c267299d20e397900b0bcf9aad
Instruction Fuzzy Hash: E622AF706087828FD728CF2AD89072BBBE2FF94344F144A6DE58687741D774E949CB92

Function 00BD9AF0 Relevance: .5, Instructions: 548COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f98570f1da2ef88396b503b59543919c54530344b59367a5a6919e4541db2713
Instruction ID: 8ab361c628c914e6746cc5b7aa253706b38ef14545d3720867f515c2dbb88c32
Opcode Fuzzy Hash: f98570f1da2ef88396b503b59543919c54530344b59367a5a6919e4541db2713
Instruction Fuzzy Hash: 61220A756086449FD328CB29C891EABB7EAFFC8300F148A1DF599C3354E670E905CB62

Function 00BD7FB0 Relevance: .5, Instructions: 512COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e86ea87de9ea9f5c16f8566c0e24e90d436f8b7b923dbbd37b96b8ecc91965b
Instruction ID: 1795ca4223a4ce946e265cbbbcfd1fa82a58122feed4dc0cc529720a7681ad13
Opcode Fuzzy Hash: 5e86ea87de9ea9f5c16f8566c0e24e90d436f8b7b923dbbd37b96b8ecc91965b
Instruction Fuzzy Hash: 5FF1D362B54B4B4BD358DD6DCC51335BEC39FC9205F4CD239A888CEBAAF834954A9200

Function 00BE91C0 Relevance: .4, Instructions: 425COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 24c28d459a9e9b7d1f64cd67e08d726fe2bebb303360d481240c2ade7d92350d
Instruction ID: 65e87c7746c4bacddd93ae43fc847b3eb7fad8d63d32ec6528fadbd93a4f031f
Opcode Fuzzy Hash: 24c28d459a9e9b7d1f64cd67e08d726fe2bebb303360d481240c2ade7d92350d
Instruction Fuzzy Hash: 43E17B312083858FC719CF2DC89066ABBE1EB99304F184ABDE9D6C7342E775D84ACB45

Function 00BD85E2 Relevance: .4, Instructions: 414COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b79291703b6068f24cf64208f47805ea5fb78ec4ea564d673a31d3ef2e6da05a
Instruction ID: 77ef4fb83870c2a2ebb8394f2ef74095e6de8816c2ed313e2ca9a92fb38ae39d
Opcode Fuzzy Hash: b79291703b6068f24cf64208f47805ea5fb78ec4ea564d673a31d3ef2e6da05a
Instruction Fuzzy Hash: E2D19062B54A4B0BD358DD6DCD52374BDC39FC9205F0CC239A888CEBEAF875964E9244

Function 00BC6E10 Relevance: .4, Instructions: 385COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f6e83742c24515450aaef7bb8ad12dfd0941b8c44e6110ebcdb8c56d2ac7615
Instruction ID: b9706809ba1366a9d2d52e78d0869384bc8db7a763db91cd73f50cb81a6598bb
Opcode Fuzzy Hash: 6f6e83742c24515450aaef7bb8ad12dfd0941b8c44e6110ebcdb8c56d2ac7615
Instruction Fuzzy Hash: C6C1F52524E6C14FCB1A8A7CA4E9ABAFFD1EB5A315F0C81FDCAC5CB312D9158509C750

Function 00BEABB0 Relevance: .4, Instructions: 379COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4bfdb248b3fb90f8076a3fe4a1e75f7bd1b50aa5aafde52d762773f77742459
Instruction ID: da54e38cf265d81b8d414fc94d82e14822ac23307e85011822eae9996b9dc488
Opcode Fuzzy Hash: d4bfdb248b3fb90f8076a3fe4a1e75f7bd1b50aa5aafde52d762773f77742459
Instruction Fuzzy Hash: 7BF1807250D2818FC3098F18D5989E27BE2FFA8714B1F42F9D4599B363D772A841CB92

Function 00BE8CF0 Relevance: .4, Instructions: 364COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5b46bfedc25e4568c6002e9e1c0849a2abd91c09d58baa77df43bfc421c5a68
Instruction ID: a949b88a621607586f8a47a38ab08fcbb28c8c1d0e2cd54952e6af41e986a8af
Opcode Fuzzy Hash: b5b46bfedc25e4568c6002e9e1c0849a2abd91c09d58baa77df43bfc421c5a68
Instruction Fuzzy Hash: E5E1FF75600B818BD329CF29C990AA7B3E6FF89304B14896DD8DB87B51DB31F846CB40

Function 00BC7430 Relevance: .4, Instructions: 358COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3fdb552d395599088d1c18996914b216fac466eb725e100a4a57cdd7d645cd1c
Instruction ID: 0e2eb40541fc53310d0151857afee990500cfca8d9886b54726f3a935e0c23d5
Opcode Fuzzy Hash: 3fdb552d395599088d1c18996914b216fac466eb725e100a4a57cdd7d645cd1c
Instruction Fuzzy Hash: E1C1D76154CAD68ED712DF2C8054BB5FFD1EBA6304F1886DDC4E48F382DA629809CB51

Function 00BCE680 Relevance: .4, Instructions: 352COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d20fe968d7b1ff7952461dca88d83bca442fd39451d6b7b8afd42daf78d95fb
Instruction ID: 52f19ff71510149b6ee3b0b99f9b9242953ca98d7e42c3635c6d3f333fbc8abf
Opcode Fuzzy Hash: 3d20fe968d7b1ff7952461dca88d83bca442fd39451d6b7b8afd42daf78d95fb
Instruction Fuzzy Hash: 22D1B072A08741CFC704CF18C494B5ABBE1FBD9314F144AADE8A9AB354D735E909CB45

Function 00BC5E3B Relevance: .3, Instructions: 343COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c24b3a57785aabdafcbb3221811825ed562655bc90e1ec7c5948a65a89eef174
Instruction ID: a461ccbd039b837717308f08b918b46ac352bede2fa237fc3d1e1716dcf25f79
Opcode Fuzzy Hash: c24b3a57785aabdafcbb3221811825ed562655bc90e1ec7c5948a65a89eef174
Instruction Fuzzy Hash: 96B1D5253096824FD7265E3880A0BFAAFE1EBBA314F2C99FDD5D64B343C525D94AC740

Function 00BC6986 Relevance: .3, Instructions: 333COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1789579293c79cbf2715ca8a4557286e13fed795c1e070b62578e1622611b3b9
Instruction ID: dce15c2445618f7465a884145d494131b2561aa8bd461f001521fb7caee51bd2
Opcode Fuzzy Hash: 1789579293c79cbf2715ca8a4557286e13fed795c1e070b62578e1622611b3b9
Instruction Fuzzy Hash: 8FD1B4352082864FC719DF2C84A19AAFBE1EF6A304B19C6BDD4DACB343D621D50ACB51

Function 00BDBAE0 Relevance: .3, Instructions: 312COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f64cf0f5c56744797a7ee13c7cfc24a689c38950e3286b39650a45d8ec728ddc
Instruction ID: 6a925a4ae06c13e27d1e8317889b1e1c205360e57996465eb0aa22556ee345c0
Opcode Fuzzy Hash: f64cf0f5c56744797a7ee13c7cfc24a689c38950e3286b39650a45d8ec728ddc
Instruction Fuzzy Hash: 77914D71A4AAC04FE305CF7A88D42A9FFE3EACB209758D1BDD5D68771AC5B5940B8310

Function 00BDB720 Relevance: .3, Instructions: 299COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c3687bf75396ee7d8b78f1c436412940f54196b244b889e1ca5e3b278e8db7d
Instruction ID: bc28c8399fd2a869cecaea33f8d5273c71664b6228292acccb2aa8094d56d20b
Opcode Fuzzy Hash: 1c3687bf75396ee7d8b78f1c436412940f54196b244b889e1ca5e3b278e8db7d
Instruction Fuzzy Hash: FF91C561A09AC50BF309DE7B4CD8165FFD3EEC7215B18D2BDC6D587769E9B1440B8240

Function 00BEB1E0 Relevance: .3, Instructions: 295COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 89499ffb481a16d25ae7c89caaf1cdcf0e64bb8a375b2032154fc3e75fc3e2ce
Instruction ID: e303df996364b9a360e9effd4625172596b989a2f920c6dbdaad81de149930bd
Opcode Fuzzy Hash: 89499ffb481a16d25ae7c89caaf1cdcf0e64bb8a375b2032154fc3e75fc3e2ce
Instruction Fuzzy Hash: 2BD169756082918FC319CF18E5D88E67BE1FFA8740B0E42F8C98A9B323D7319941CB55

Function 00BE8740 Relevance: .3, Instructions: 294COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dac2537d490ba33174603688ac8cf94a69698a8dd5e2e64aa4407173e6572fec
Instruction ID: 19dd6d92f56a8f33004d6d832f1bbcd0199b30a68bf16e6a89057efd75aeb91e
Opcode Fuzzy Hash: dac2537d490ba33174603688ac8cf94a69698a8dd5e2e64aa4407173e6572fec
Instruction Fuzzy Hash: 1CB10475214B818BC328DF29C9909A7B7E6FF89704B18896DD89BC7B51DB31F841CB44

Function 00BCE340 Relevance: .3, Instructions: 269COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b70c3912a0b96a4da76343c6791705357e7c54723d6ca868b618e930c8524668
Instruction ID: 855bcfd15df8be131f59efa24e0986ae7998c7dd21bbf12230c8948ad0a5287b
Opcode Fuzzy Hash: b70c3912a0b96a4da76343c6791705357e7c54723d6ca868b618e930c8524668
Instruction Fuzzy Hash: 63918E76608345CBC718CE14D450BAAB7E1FBD8314F188AADE8E997380D778D90ACB95

Function 00BD7660 Relevance: .3, Instructions: 265COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6e6310cfa563ca1289deb0d84208e6cec323291e05a14407de8c91865032c38a
Instruction ID: 574fe90d68a9f3684fbbb5a0f0401048fc486f25ef5eadd7ee21454f534c0c48
Opcode Fuzzy Hash: 6e6310cfa563ca1289deb0d84208e6cec323291e05a14407de8c91865032c38a
Instruction Fuzzy Hash: 40912E23B496900FB3058FBA4CD9496FFD3AEDB25434FD2BCC5D88B75AD5B5A00A8610

Function 00BD7A10 Relevance: .3, Instructions: 258COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f3b852131b5081af15699e44c77731c55369b329c3f17fb2a8eec5539571c77
Instruction ID: c42a320b62e2563a4f703b723b5e208651d9a5b43305a1d385d6ec236b73259f
Opcode Fuzzy Hash: 2f3b852131b5081af15699e44c77731c55369b329c3f17fb2a8eec5539571c77
Instruction Fuzzy Hash: A4910122B4D5910FD3198F7A88E95A6FFE3AEDA20074ED1FDC9C987726C4A5940DC350

Function 00BB0930 Relevance: .2, Instructions: 234COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0d906fde223d7b03f9d97fc19e5d19d462663d1204fed77c3b6565f848400d34
Instruction ID: 8b75212b082327abf3318a255cce247f4c680feeb93ab49285881b16c7d8b3ff
Opcode Fuzzy Hash: 0d906fde223d7b03f9d97fc19e5d19d462663d1204fed77c3b6565f848400d34
Instruction Fuzzy Hash: ED919AB05143028BD714EF18C484A77FBE0FF98708F1489ADE89A9B312E771E955CB92

Function 00BB8380 Relevance: .2, Instructions: 228COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3de504337a70d3e81710e16bc2d910534e07e253a864f4b1529b3110b5428457
Instruction ID: 9dfd70ce9bda254630a416d6192e956f1ece6cfe88049b4b62b010186739cebc
Opcode Fuzzy Hash: 3de504337a70d3e81710e16bc2d910534e07e253a864f4b1529b3110b5428457
Instruction Fuzzy Hash: D5A10B756087458FC314CF29C49096AFBF2BFC8704F198A6DE99987325EB70E945CB82

Function 00BD1410 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f56c977bc715bb83ccecc1f035413cb1ac46b78ca2e2cdb89f5f640002999502
Instruction ID: eddc02ffcda3c81f1184b0d1474b7645b444663c7cec99c8afd5e87626b37dd1
Opcode Fuzzy Hash: f56c977bc715bb83ccecc1f035413cb1ac46b78ca2e2cdb89f5f640002999502
Instruction Fuzzy Hash: 35816371A083528FDB08CF18D4D065AB7E1FBD9314F198AAEE4969B341E735D909CB82

Function 00BE57D0 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ffb5a8e8b8af2e0035e279c9ad93179ae0d9c5540d75b2729666da801d897311
Instruction ID: c55ac91e6ef79889c9373b6a215e95d96a2b8f5028687c26323f5f06d6394514
Opcode Fuzzy Hash: ffb5a8e8b8af2e0035e279c9ad93179ae0d9c5540d75b2729666da801d897311
Instruction Fuzzy Hash: 5A813B327185824BDB18CF2AECD053AB7E3AB9D301B19853DD6868B366CE74EA15C750

Function 00BC7200 Relevance: .2, Instructions: 209COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bba126c67f6213cc2c7b5393b6fe04b9bcee53e41702d629dad298e085c61df8
Instruction ID: 1a4a043f1e3f33946e16a25629ccb6aeb1b2808d3f89749bc5dc10272008dec4
Opcode Fuzzy Hash: bba126c67f6213cc2c7b5393b6fe04b9bcee53e41702d629dad298e085c61df8
Instruction Fuzzy Hash: 7A71B23554C6828ACB11CE288484B65FFD2EBE6304F0CC6DDD8C99F356DA22E909CB91

Function 00BB78C0 Relevance: .2, Instructions: 178COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 63bde09c537a4213f7de40edceb5d3d9a8bb7c75d367e40179410ee8b52a78f7
Instruction ID: da55a01a6bb793ebcea6ba08149c314f76a8366efb6f3979e60c0195f578a2a8
Opcode Fuzzy Hash: 63bde09c537a4213f7de40edceb5d3d9a8bb7c75d367e40179410ee8b52a78f7
Instruction Fuzzy Hash: 0881063954A7819FC711CF29C0D04A6FBE2BF9E204F5C999DE9C50B316C231A91ACB92

Function 00BC4E30 Relevance: .2, Instructions: 169COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 761922d25f58acc6d98e8fc4a0727de3a14ab97b7d575fea601c58ceb484edf0
Instruction ID: 29587b43a5333f1c177935952482b0a0e331b66c9de18d6a9f19a0e96a420a95
Opcode Fuzzy Hash: 761922d25f58acc6d98e8fc4a0727de3a14ab97b7d575fea601c58ceb484edf0
Instruction Fuzzy Hash: 805105366083914BD715DF2C94A07A6FBE2EBDA324F1989EDD8D887301D371990A8751

Function 00BC6560 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9fae38c31ac3e6366611ebbb41cae401fea5393a98b7b8155f8df23b955ccbd4
Instruction ID: 0dc54730a13b2f4c9fc3592367e099c8fa67b211c9fd349bdda350842b73ed12
Opcode Fuzzy Hash: 9fae38c31ac3e6366611ebbb41cae401fea5393a98b7b8155f8df23b955ccbd4
Instruction Fuzzy Hash: D651C2366182834BC3259F288461AB9FBE1EFAA304F6C89BDD8D58B742D621D507CB50

Function 00BE9B00 Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0b4f27dd10139f30faea009d98bf7d04ad43b169fe1efa635cf320682f8d45aa
Instruction ID: 9e4b35db408a14dde2f792dc5c436a51a04756041475ed18231ce4b41c4176b7
Opcode Fuzzy Hash: 0b4f27dd10139f30faea009d98bf7d04ad43b169fe1efa635cf320682f8d45aa
Instruction Fuzzy Hash: 13313E3374558203F71DCA3F9CA12BAEAD38FC522872DD57E99C58B356EDB9441B8104

Function 00419920 Relevance: 88.0, APIs: 45, Strings: 5, Instructions: 463COMMON

Download Yara Rule

APIs

Part of subcall function 004078E0: GetClientRect.USER32(?,00000000), ref: 004078F1

Part of subcall function 00418B80: CreateSolidBrush.GDI32(4FF694EA), ref: 00418B8B

FillRect.USER32(00000000,?,00000000), ref: 004199CF
?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000), ref: 00419A41
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000), ref: 00419A5D
?Draw@CxImage@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z.CXIMAGECRT(00000000,?,00000000,00000000,00000000,00000000,00000000), ref: 00419A8A
?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000), ref: 00419AA9
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000), ref: 00419ABD
?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000), ref: 00419AD9
?Draw@CxImage@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z.CXIMAGECRT(00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000), ref: 00419AFB
?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000), ref: 00419B10
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000), ref: 00419B22
?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000), ref: 00419B34
?Draw@CxImage@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z.CXIMAGECRT(00000000,?,?,00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?), ref: 00419B58
?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,?,?,00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000), ref: 00419B7A
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,00000000,?,?,00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000), ref: 00419B96
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,00000000,00000000,00000000,?,?,00000000,00000000,00000000,00000000,00000000,?,00000000,00000000), ref: 00419BB8
?Draw@CxImage@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z.CXIMAGECRT(00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?,00000000,00000000,00000000,00000000,00000000,?), ref: 00419BE3
?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?,00000000,00000000,00000000,00000000), ref: 00419BF8
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?,00000000,00000000,00000000), ref: 00419C14
?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?,00000000,00000000), ref: 00419C28
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(?,00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?,00000000), ref: 00419C3F
?Draw@CxImage@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z.CXIMAGECRT(00000000,?,?,00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?), ref: 00419C5D
?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,?,?,00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000), ref: 00419C7F
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,00000000,?,?,00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000), ref: 00419C9E
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,00000000,00000000,00000000,?,?,00000000,00000000,00000000,00000000,00000000,?,00000000,00000000), ref: 00419CC1
?Draw@CxImage@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z.CXIMAGECRT(00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?,00000000,00000000,00000000,00000000,00000000,?), ref: 00419CEE
?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?,00000000,00000000,00000000,00000000), ref: 00419D0D
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?,00000000,00000000,00000000), ref: 00419D21
?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?,00000000,00000000), ref: 00419D40
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?,00000000), ref: 00419D55
?Draw@CxImage@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z.CXIMAGECRT(00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?), ref: 00419D75
?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000), ref: 00419D8A
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000), ref: 00419D9C
?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000), ref: 00419DAE
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(?,00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,00000000), ref: 00419DC5
?Draw@CxImage@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z.CXIMAGECRT(00000000,?,?,00000000,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?), ref: 00419DE5
SetBkMode.GDI32(00000000,00000001), ref: 00419E09
GetTextColor.GDI32(00000000), ref: 00419E18
SetTextColor.GDI32(00000000,0096681D), ref: 00419E2C
memset.MSVCR80 ref: 00419ED8
SelectObject.GDI32(00000000,00000000), ref: 00419F18
memset.MSVCR80 ref: 00419F6A
memset.MSVCR80 ref: 00419FB1

Strings

Clip Line, xrefs: 00419F21
Tahoma, xrefs: 00419E9C
%, xrefs: 00419FC0
F, xrefs: 00419FD0
Border, xrefs: 00419F72

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Image@@$Height@Width@$C__@@Draw@T@@_Utag$memset$ColorRectText$BrushClientCreateFillModeObjectSelectSolid
String ID: %$Border$Clip Line$F$Tahoma
API String ID: 2569125150-2632024743
Opcode ID: fbd3d37cbcfb4a5d345145a4449552b179033964231fac46975376ef3b4c5788
Instruction ID: 6acad93585106d0d29ca26f9a2d8656a706cc7dc15e340c93166a7cfeebd7e9c
Opcode Fuzzy Hash: fbd3d37cbcfb4a5d345145a4449552b179033964231fac46975376ef3b4c5788
Instruction Fuzzy Hash: 5F226E709041199FEF18EB68CCA9BEEB7B8FF54304F1441ADE10AA7291DB742A85CF54

Function 00BA5960 Relevance: 72.1, APIs: 31, Strings: 10, Instructions: 384windowCOMMON

Download Yara Rule

APIs

cvError.CXCORE099(FFFFFF2D,cvCreateTrackbar,Bad trackbar maximal value,.\window_w32.cpp,000004B9), ref: 00BA59C7
CreateToolbarEx.COMCTL32(?,40000201,00000001,00000000,00000000,00000000,00000000,00000000,00000010,00000014,00000010,00000010,00000014), ref: 00BA5A4B
GetClientRect.USER32(?,?), ref: 00BA5A5D
MoveWindow.USER32(?,00000000,00000000,?,0000001E,00000001), ref: 00BA5A72
SendMessageA.USER32(?,00000421,00000000,00000000), ref: 00BA5A83
ShowWindow.USER32(?,00000005), ref: 00BA5A8B
GetWindowLongA.USER32(?,000000FC), ref: 00BA5AA0
SetWindowLongA.USER32(?,000000FC,00BA5630), ref: 00BA5AC3
SetWindowLongA.USER32(?,000000EB,00000000), ref: 00BA5ACC
SendMessageA.USER32(?,00000418,00000000,00000000), ref: 00BA5ADB
cvError.CXCORE099(000000E5,cvCreateTrackbar,NULL window or trackbar name,.\window_w32.cpp,000004B6), ref: 00BA5D9C

Strings

, xrefs: 00BA5B5A
.\window_w32.cpp, xrefs: 00BA59B3, 00BA5D8B
cvCreateTrackbar, xrefs: 00BA59BD, 00BA5D95
STATIC, xrefs: 00BA5C9D
Bad trackbar maximal value, xrefs: 00BA59B8
Buddy%p, xrefs: 00BA5C5A
NULL window or trackbar name, xrefs: 00BA5D90
Trackbar%p, xrefs: 00BA5BF1
msctls_trackbar32, xrefs: 00BA5C48
@, xrefs: 00BA5B62

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Window$Long$ErrorMessageSend$ClientCreateMoveRectShowToolbar
String ID: $.\window_w32.cpp$@$Bad trackbar maximal value$Buddy%p$NULL window or trackbar name$STATIC$Trackbar%p$cvCreateTrackbar$msctls_trackbar32
API String ID: 2803709427-1531181224
Opcode ID: 133c5ffbfb3e4528f45e619cd47b5bcc5c2574ba736cd9f8ca40fb571c222579
Instruction ID: 59a67b7aa7a8191f59790ab95e21a08b04393272dc36e05c1c31b0738f88a2e1
Opcode Fuzzy Hash: 133c5ffbfb3e4528f45e619cd47b5bcc5c2574ba736cd9f8ca40fb571c222579
Instruction Fuzzy Hash: E8D17BB1604740AFD320DF69CD81F6BB7E9FB88B00F504A1DF64997691DBB1E8048BA5

Function 00512040 Relevance: 67.0, APIs: 29, Strings: 9, Instructions: 499memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 00416740: _DebugHeapAllocator.LIBCPMTD ref: 00416795

Part of subcall function 004CB0F0: _DebugHeapAllocator.LIBCPMTD ref: 004CB139
Part of subcall function 004CB0F0: _DebugHeapAllocator.LIBCPMTD ref: 004CB155
Part of subcall function 004CB0F0: _DebugHeapAllocator.LIBCPMTD ref: 004CB171
Part of subcall function 004CB0F0: _DebugHeapAllocator.LIBCPMTD ref: 004CB1A3
Part of subcall function 004CB0F0: _DebugHeapAllocator.LIBCPMTD ref: 004CB1D6

Part of subcall function 004CB5F0: SHGetSpecialFolderPathW.SHELL32(00000000,?,?,00000000), ref: 004CB626
Part of subcall function 004CB5F0: _wmkdir.MSVCR80 ref: 004CB633

Part of subcall function 0040EE30: _DebugHeapAllocator.LIBCPMTD ref: 0040EE68
Part of subcall function 0040EE30: _DebugHeapAllocator.LIBCPMTD ref: 0040EEAA

CreateDirectoryW.KERNEL32(00000000,00000000,?,?,?,00000001,\ManyCam,00000000,00569E94,?,00569E90,?,00569E8C,?,00000000,00000000), ref: 0051221A
_DebugHeapAllocator.LIBCPMTD ref: 0051222B

Part of subcall function 0040EA00: _DebugHeapAllocator.LIBCPMTD ref: 0040EA0E

_DebugHeapAllocator.LIBCPMTD ref: 00512251

Part of subcall function 004167E0: _DebugHeapAllocator.LIBCPMTD ref: 004167EE

Part of subcall function 004CC140: wcscpy_s.MSVCR80 ref: 004CC168
Part of subcall function 004CC140: SHFileOperationW.SHELL32(00000000), ref: 004CC1BD

CreateDirectoryW.KERNEL32(00000000,00000000,?,?,NewEffect,00569EAC,?,00569E90,?,00569E8C,?,00000000,00000000,00000002,4FF694EA), ref: 00512270
CreateDirectoryW.KERNEL32(00000000,?,?,?,?,00569ED4,640x480,00000000,?,00569E90,?,00569E8C,?,00000000,00000000,00000002), ref: 005122D0
CreateDirectoryW.KERNEL32(00000000,?,?,?,?,00569EE8,352x288,00000000,?,00569E90,?,00569E8C,?,00000000,00000000,00000002), ref: 0051234A
??0CxImage@@QAE@K@Z.CXIMAGECRT(00000000,?,00569E90,?,00569E8C,?,00000000,00000000,00000002,4FF694EA), ref: 00512372
?SetFrame@CxImage@@QAEXJ@Z.CXIMAGECRT(00000000,00000000,?,00569E90,?,00569E8C,?,00000000,00000000,00000002,4FF694EA), ref: 00512383
?SetRetreiveAllFrames@CxImage@@QAEX_N@Z.CXIMAGECRT(00000001,00000000,00000000,?,00569E90,?,00569E8C,?,00000000,00000000,00000002,4FF694EA), ref: 00512390
?Load@CxImage@@QAE_NPB_WK@Z.CXIMAGECRT(00000000,00000000,00000001,00000000,00000000,?,00569E90,?,00569E8C,?,00000000,00000000,00000002,4FF694EA), ref: 005123A6
~_Mpunct.LIBCPMTD ref: 005123C8

Part of subcall function 004166C0: ?DestroyFrames@CxImage@@QAE_NXZ.CXIMAGECRT(?,?,0050679A,You have selected an image with the dimension larger than 3000x2000.,00000000,00000000), ref: 004166D3
Part of subcall function 004166C0: ?Destroy@CxImage@@QAE_NXZ.CXIMAGECRT(?,?,0050679A,You have selected an image with the dimension larger than 3000x2000.,00000000,00000000), ref: 004166DB

?GetNumFrames@CxImage@@QBEJXZ.CXIMAGECRT(00000000,00000000,00000001,00000000,00000000,?,00569E90,?,00569E8C,?,00000000,00000000,00000002,4FF694EA), ref: 005123F6
?GetNumFrames@CxImage@@QBEJXZ.CXIMAGECRT(?,?,?,?,00569F04,preview.jpg,00000000,00000000,00000001,00000000,00000000,?,00569E90,?,00569E8C), ref: 00512474
?SetFrame@CxImage@@QAEXJ@Z.CXIMAGECRT(00000000,00000000,00000002,4FF694EA), ref: 005124F5
?Load@CxImage@@QAE_NPB_WK@Z.CXIMAGECRT(00000000,00000000,00000000,00000000,00000002,4FF694EA), ref: 0051250B
?GetFrameDelay@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,00000000,00000002,4FF694EA), ref: 00512516
?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT(?,?,?,00000000,?,?,?,?,?,00569F04,preview.jpg,00000000,00000000,00000001,00000000,00000000), ref: 005125AD
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(00000000,?,?,?,00000000,?,?,?,?,?,00569F04,preview.jpg,00000000,00000000,00000001,00000000), ref: 005125B6

Strings

.mce, xrefs: 005127C2
NewEffect, xrefs: 00512230
640x480, xrefs: 00512278
\ManyCam, xrefs: 005121C1
352x288, xrefs: 005122F2
InternalProperties, xrefs: 00512657
preview.jpg, xrefs: 005126EC
preview.jpg, xrefs: 00512412
blocked=0type_id=%dcategory_name=%screator_info=preview=%s, xrefs: 005126FA

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Image@@$AllocatorDebugHeap$CreateDirectoryFrames@$Frame@Load@$Delay@DestroyDestroy@FileFolderFrameHeight@MpunctOperationPathRetreiveSpecialWidth@_wmkdirwcscpy_s
String ID: .mce$352x288$640x480$InternalProperties$NewEffect$\ManyCam$blocked=0type_id=%dcategory_name=%screator_info=preview=%s$preview.jpg$preview.jpg
API String ID: 2719232945-3254136489
Opcode ID: edb56aa18bfe84e8b2a6fcb1c4672e86fafff6400bd075d5d8bb305b2034b014
Instruction ID: 9b3459efdfe137e0bd21340dd663e66a4f958181f4942486322fc66185ab85f6
Opcode Fuzzy Hash: edb56aa18bfe84e8b2a6fcb1c4672e86fafff6400bd075d5d8bb305b2034b014
Instruction Fuzzy Hash: D43219B19002599BDB24EB65CC95BEEBBB8BF44304F0041EDE509A7282DB746F84CF95

Function 00409060 Relevance: 54.7, APIs: 22, Strings: 9, Instructions: 435COMMON

Download Yara Rule

APIs

Part of subcall function 004078E0: GetClientRect.USER32(?,00000000), ref: 004078F1

Part of subcall function 00418B80: CreateSolidBrush.GDI32(4FF694EA), ref: 00418B8B

FillRect.USER32(00000000,?,00000000), ref: 0040910F
?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000), ref: 00409152
?Draw@CxImage@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z.CXIMAGECRT(00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 0040917C
?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00409191
?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 004091BC
?Draw@CxImage@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z.CXIMAGECRT(00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 004091DB
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(000000E8,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00409212
?Draw@CxImage@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z.CXIMAGECRT(00000000,00000006,00000006,00000000,000000E8,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00409231
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(000000E8,00000000,00000000,00000000,00000006,00000006,00000000,000000E8,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 0040924D
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(00000006,?,000000E8,00000000,00000000,00000000,00000006,00000006,00000000,000000E8,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00409269
?Draw@CxImage@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z.CXIMAGECRT(00000000,-00000006,00000006,?,000000E8,00000000,00000000,00000000,00000006,00000006,00000000,000000E8,00000000,00000000,00000000,00000000), ref: 00409287
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(000000E8,00000000,00000000,00000000,-00000006,00000006,?,000000E8,00000000,00000000,00000000,00000006,00000006,00000000,000000E8,00000000), ref: 004092A3
?Draw@CxImage@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z.CXIMAGECRT(00000000,?,00000006,00000000,000000E8,00000000,00000000,00000000,-00000006,00000006,?,000000E8,00000000,00000000,00000000,00000006), ref: 004092C4
?Draw@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@_N@Z.CXIMAGECRT(00000000,005952B0,00000000,00000000,00000000,?,00000006,00000000,000000E8,00000000,00000000,00000000,-00000006,00000006,?,000000E8), ref: 004092E7
memset.MSVCR80 ref: 00409647
SelectObject.GDI32(00000000,00000000), ref: 00409676
SetTextColor.GDI32(00000000,00945121), ref: 0040968D

Part of subcall function 00415F90: CopyRect.USER32(?,004093A8), ref: 00415F9F

DrawTextW.USER32(00000000,00000000,00000000,00000018,00000020), ref: 004096E4
SelectObject.GDI32(00000000,?), ref: 004096F9
GetWindowRect.USER32(00000000,?), ref: 0040971D
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(?,000000FF,000000FF,00000000,00000000,?), ref: 0040974D
?Draw@CxImage@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z.CXIMAGECRT(00000000,?,?,000000FF,000000FF,00000000,00000000,?), ref: 00409770

Strings

Type:, xrefs: 00409478
Select Resource File:, xrefs: 00409464
k, xrefs: 0040950E
Category:, xrefs: 0040948C
Name:, xrefs: 004094A0
], xrefs: 004094FA
Tahoma, xrefs: 0040960B
Created by:, xrefs: 004094B4
,, xrefs: 004094E6

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Image@@$C__@@Draw@Utag$T@@_$Width@$Rect$Height@$ObjectSelectText$BrushClientColorCopyCreateDrawFillSolidU3@_Windowmemset
String ID: ,$Category:$Created by:$Name:$Select Resource File:$Tahoma$Type:$]$k
API String ID: 333958392-4118964679
Opcode ID: 57c0907e371b0e5315c579a3b0ab3a5d9bb1bc661649efe18dc397683e395b28
Instruction ID: c7ad2873c58e454c86f9403bdf801017c004aeaca137986ed775093af6690a25
Opcode Fuzzy Hash: 57c0907e371b0e5315c579a3b0ab3a5d9bb1bc661649efe18dc397683e395b28
Instruction Fuzzy Hash: 1712F970900258DFEB24EB64CC59BEEBB74AF55308F1081E9E10A7B291DB746E88CF55

Function 004DFB90 Relevance: 53.0, APIs: 17, Strings: 13, Instructions: 467memoryCOMMON

Download Yara Rule

APIs

_DebugHeapAllocator.LIBCPMTD ref: 004DFBF8
_DebugHeapAllocator.LIBCPMTD ref: 004DFCA8
_DebugHeapAllocator.LIBCPMTD ref: 004DFD09
_DebugHeapAllocator.LIBCPMTD ref: 004DFD20
_DebugHeapAllocator.LIBCPMTD ref: 004DFD4C
??2@YAPAXI@Z.MSVCR80(00000730,Objects,?,00000000,?,00000001,mce;png;gif;bmp;jpg,00000000,00000000,Avatars,Objects,?,Objects,00000000,?,?), ref: 004DFDA6
_DebugHeapAllocator.LIBCPMTD ref: 004DFDDA

Strings

Objects, xrefs: 004DFCD5
Face accessories, xrefs: 004E0287
Face accessories, xrefs: 004E013B
Backgrounds, xrefs: 004DFF99
Objects, xrefs: 004DFD70
Face accessories, xrefs: 004E018B
Backgrounds, xrefs: 004DFF49
Avatars, xrefs: 004DFCFE
mce;png;gif;bmp;jpg, xrefs: 004DFD38
Avatars, xrefs: 004DFCE9
Backgrounds, xrefs: 004E0095
Objects, xrefs: 004DFCBC
Text over video, xrefs: 004DFED9

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$??2@
String ID: Avatars$Avatars$Backgrounds$Backgrounds$Backgrounds$Face accessories$Face accessories$Face accessories$Objects$Objects$Objects$Text over video$mce;png;gif;bmp;jpg
API String ID: 1120120259-206835408
Opcode ID: d03f7ad0f4026a635888b16adfd0c88c78ab99df69ea574cede163314c466ec1
Instruction ID: 863c393ab99b281b1a89dc60ed5188a45fcf53b181839f16f77b3e1b5f5f418e
Opcode Fuzzy Hash: d03f7ad0f4026a635888b16adfd0c88c78ab99df69ea574cede163314c466ec1
Instruction Fuzzy Hash: B5222BB0D023589ADB64DB69CD45BDEBBB5AB49304F0041DEE009B7282DB745F84CF96

Function 00BA4590 Relevance: 51.1, APIs: 22, Strings: 7, Instructions: 311COMMON

Download Yara Rule

APIs

cvGetMat.CXCORE099 ref: 00BA45B5
cvGetErrStatus.CXCORE099(?,00000000,00000000,?), ref: 00BA45BF
cvError.CXCORE099(000000FF,cvConvertImage,Inner function failed.,.\utils.cpp,00000203,?,00000000,00000000,?), ref: 00BA45DE
cvReleaseMat.CXCORE099(?,?,?,?,?,?,?,00000000,00000000,?), ref: 00BA45EB
cvGetMat.CXCORE099(?,?,00000000,00000000,?,?,00000000,00000000,?), ref: 00BA4607
cvGetErrStatus.CXCORE099(?,?,?,?,?,00000000,00000000,?), ref: 00BA4615
cvError.CXCORE099(000000FF,cvConvertImage,Inner function failed.,.\utils.cpp,00000204,?,?,?,?,?,00000000,00000000,?), ref: 00BA4634
cvReleaseMat.CXCORE099(?,?,?,?,?,?,?,?,?,?,00000000,00000000,?), ref: 00BA4642

Strings

Inner function failed., xrefs: 00BA45D2, 00BA4628, 00BA48B5
cvConvertImage, xrefs: 00BA45D7, 00BA462D, 00BA467B, 00BA46B4, 00BA46FB, 00BA48BA, 00BA48F2
.\utils.cpp, xrefs: 00BA45CD, 00BA4623, 00BA4671, 00BA46AA, 00BA46F1, 00BA48B0, 00BA48E8
Unsupported combination of input/output formats, xrefs: 00BA48ED
Destination image must be 8u, xrefs: 00BA46AF
Destination image must have 1 or 3 channels, xrefs: 00BA46F6
Source image must have 1, 3 or 4 channels, xrefs: 00BA4676

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: ErrorReleaseStatus
String ID: .\utils.cpp$Destination image must be 8u$Destination image must have 1 or 3 channels$Inner function failed.$Source image must have 1, 3 or 4 channels$Unsupported combination of input/output formats$cvConvertImage
API String ID: 93656100-3009054405
Opcode ID: 14072d88cea73aaf9d2dc4ab53cd8a84b3aeadd550db8d1a8328088a8b709531
Instruction ID: ef9bfe513ef613db0cb7c0cf75c66b55c38a322a812f1478d1e54ad2f1a5f48e
Opcode Fuzzy Hash: 14072d88cea73aaf9d2dc4ab53cd8a84b3aeadd550db8d1a8328088a8b709531
Instruction Fuzzy Hash: A49127B2A083406FD610EE18DC82F6B73E9EBD6714F180998F555572C1E7B6ED08C7A2

Function 00BD5981 Relevance: 48.5, APIs: 14, Strings: 18, Instructions: 455COMMON

Download Yara Rule

APIs

sprintf.MSVCR80 ref: 00BD5A42
sprintf.MSVCR80 ref: 00BD5AC1
sprintf.MSVCR80 ref: 00BD5B99
sprintf.MSVCR80 ref: 00BD5BB6

Strings

Planarconfiguration, xrefs: 00BD5BDD, 00BD5DA1
Sorry, can not handle RGB image with %s=%d, xrefs: 00BD5C48
Missing required "Colormap" tag, xrefs: 00BD5ABB
Color channels, xrefs: 00BD5C43
Compression, xrefs: 00BD5CEE, 00BD5D6F
Sorry, can not handle YCbCr images with %s=%d, xrefs: 00BD5BE2
Sorry, can not handle image, xrefs: 00BD5E65, 00BD5EA8
Sorry, LogLuv data must have %s=%d or %d, xrefs: 00BD5D74
Missing needed %s tag, xrefs: 00BD5A3C
Samples/pixel, xrefs: 00BD5B88, 00BD5CBE
Sorry, LogL data must have %s=%d, xrefs: 00BD5CF3
Sorry, can not handle image with %s=%d, xrefs: 00BD5D38
Sorry, can not handle separated image with %s=%d, xrefs: 00BD5C8D, 00BD5CC3
Out of memory for colormap copy, xrefs: 00BD5BB0
InkSet, xrefs: 00BD5C88
Sorry, can not handle contiguous data with %s=%d, and %s=%d and Bits/Sample=%d, xrefs: 00BD5B93
Sorry, can not handle LogLuv images with %s=%d, xrefs: 00BD5DA6
PhotometricInterpretation, xrefs: 00BD5A37, 00BD5B8E, 00BD5D33

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: sprintf
String ID: Color channels$Compression$InkSet$Missing needed %s tag$Missing required "Colormap" tag$Out of memory for colormap copy$PhotometricInterpretation$Planarconfiguration$Samples/pixel$Sorry, LogL data must have %s=%d$Sorry, LogLuv data must have %s=%d or %d$Sorry, can not handle LogLuv images with %s=%d$Sorry, can not handle RGB image with %s=%d$Sorry, can not handle YCbCr images with %s=%d$Sorry, can not handle contiguous data with %s=%d, and %s=%d and Bits/Sample=%d$Sorry, can not handle image$Sorry, can not handle image with %s=%d$Sorry, can not handle separated image with %s=%d
API String ID: 590974362-2918685798
Opcode ID: 907d48884237cdb234494494d814d7d8d2a90e39c98e8e3d010bf53d771db891
Instruction ID: 50d072d379445e1024c732029c1f5c5cc2d3fdb41cb95010f22a84d368242477
Opcode Fuzzy Hash: 907d48884237cdb234494494d814d7d8d2a90e39c98e8e3d010bf53d771db891
Instruction Fuzzy Hash: B6D116716407046BE324BB28DC86DBBB3E4EF80710F8449BBF949C6351F6B9E5498762

Function 00BD5590 Relevance: 43.7, APIs: 12, Strings: 17, Instructions: 217COMMON

Download Yara Rule

APIs

sprintf.MSVCR80 ref: 00BD55AA

Strings

Planarconfiguration, xrefs: 00BD56D9, 00BD581B
Sorry, requested compression method is not configured, xrefs: 00BD55A4
Sorry, can not handle RGB image with %s=%d, xrefs: 00BD5705
Color channels, xrefs: 00BD5700
Compression, xrefs: 00BD578F, 00BD57EB
Sorry, can not handle YCbCr images with %s=%d, xrefs: 00BD56DE
Sorry, can not handle images with %d-bit samples, xrefs: 00BD583E
Sorry, LogLuv data must have %s=%d or %d, xrefs: 00BD57F0
Missing needed %s tag, xrefs: 00BD5619
Samples/pixel, xrefs: 00BD569B, 00BD5761
Sorry, LogL data must have %s=%d, xrefs: 00BD5794
Sorry, can not handle image with %s=%d, xrefs: 00BD57B9
Sorry, can not handle separated image with %s=%d, xrefs: 00BD5734, 00BD5766
InkSet, xrefs: 00BD572F
Sorry, can not handle contiguous data with %s=%d, and %s=%d and Bits/Sample=%d, xrefs: 00BD56AA
Sorry, can not handle LogLuv images with %s=%d, xrefs: 00BD5820
PhotometricInterpretation, xrefs: 00BD5614, 00BD56A5, 00BD57B4

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: sprintf
String ID: Color channels$Compression$InkSet$Missing needed %s tag$PhotometricInterpretation$Planarconfiguration$Samples/pixel$Sorry, LogL data must have %s=%d$Sorry, LogLuv data must have %s=%d or %d$Sorry, can not handle LogLuv images with %s=%d$Sorry, can not handle RGB image with %s=%d$Sorry, can not handle YCbCr images with %s=%d$Sorry, can not handle contiguous data with %s=%d, and %s=%d and Bits/Sample=%d$Sorry, can not handle image with %s=%d$Sorry, can not handle images with %d-bit samples$Sorry, can not handle separated image with %s=%d$Sorry, requested compression method is not configured
API String ID: 590974362-4190150193
Opcode ID: fc4baa1cf3c40099bf2ac82bda7cdcfba66ebd71d2cf8704032e54068b692213
Instruction ID: ac9cfc132f3fd8addf87f1ab6ca6032b1d77e12bff3c7626aaef3718ad5c8546
Opcode Fuzzy Hash: fc4baa1cf3c40099bf2ac82bda7cdcfba66ebd71d2cf8704032e54068b692213
Instruction Fuzzy Hash: E151E871704701AFE764EB29EC499A7B3E4EF80700F4448B6F54DD7290E6A5DC4AC752

Function 00473AC0 Relevance: 40.5, APIs: 8, Strings: 15, Instructions: 263memoryCOMMON

Download Yara Rule

APIs

wcsncpy.MSVCR80 ref: 00473B72

Part of subcall function 004749C0: List.LIBCMTD ref: 004749CA

_DebugHeapAllocator.LIBCPMTD ref: 00473BDF
_DebugHeapAllocator.LIBCPMTD ref: 00473BF7
wcsncpy.MSVCR80 ref: 00473C23
_wtoi.MSVCR80(00000000,font-size,font-family,-00000004,00000000,00000000,?,?), ref: 00473C46
_wtoi.MSVCR80(00000000,bold,normal,font-weight,font-size,font-family,-00000004,00000000,00000000,?,?), ref: 00473CA8
_DebugHeapAllocator.LIBCPMTD ref: 00473CE4
memcpy.MSVCR80(00000000,?,00000004,?,?,?,color,font-weight,font-size,font-family,-00000004,00000000,00000000,?,?), ref: 00473D09

Strings

vertical-align, xrefs: 00473D7D
Tahoma, xrefs: 00473B66
bottom, xrefs: 00473DAB
font-weight, xrefs: 00473C54
bold, xrefs: 00473C82
left, xrefs: 00473D22
middle, xrefs: 00473DCB
color, xrefs: 00473CBD
font-family, xrefs: 00473C00
text-align, xrefs: 00473D11
top, xrefs: 00473D8E
normal, xrefs: 00473C65
right, xrefs: 00473D3F
center, xrefs: 00473D5F
font-size, xrefs: 00473C2C

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$_wtoiwcsncpy$Listmemcpy
String ID: Tahoma$bold$bottom$center$color$font-family$font-size$font-weight$left$middle$normal$right$text-align$top$vertical-align
API String ID: 2887013889-1516497678
Opcode ID: 788e32562ee1b3e60529b53916602aee49f0928f9813a148764b4366f98aa258
Instruction ID: 2ca92ed9edc0e43fd755dbe637c67a1d90932da1e7afedfaae36012b12e5aafe
Opcode Fuzzy Hash: 788e32562ee1b3e60529b53916602aee49f0928f9813a148764b4366f98aa258
Instruction Fuzzy Hash: 8DB17470600109DFDB04DF65D991AEEBBB4BF14305F10845EE80577392EB38EA59CB65

Function 004F6BD0 Relevance: 38.7, APIs: 15, Strings: 7, Instructions: 165fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,80000000,00000001,00000000,00000003,00000080,00000000,?,Dynamic), ref: 004F6C39
GetFileSize.KERNEL32(000000FF,00000000), ref: 004F6C72
CloseHandle.KERNEL32(000000FF), ref: 004F6C83

Part of subcall function 00416740: _DebugHeapAllocator.LIBCPMTD ref: 00416795

CreateFileW.KERNEL32(00000000,80000000,00000000,00000000,00000003,00000000,00000000,?,Dynamic), ref: 004F6CD4

Strings

The Resource File is corrupted. Please select another., xrefs: 004F6C48
You have selected a file with the size larger than 3Mb., xrefs: 004F6D24
The Resource File is corrupted. Please select another., xrefs: 004F6CE3
You have selected an image with the dimension larger than 3000x2000., xrefs: 004F6DDB
Dynamic, xrefs: 004F6C05
The file size is larger than the maximum allowed (10 Mb)., xrefs: 004F6C89
The Resource File is corrupted. Please select another., xrefs: 004F6D81

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: File$Create$AllocatorCloseDebugHandleHeapSize
String ID: Dynamic$The Resource File is corrupted. Please select another.$The Resource File is corrupted. Please select another.$The Resource File is corrupted. Please select another.$The file size is larger than the maximum allowed (10 Mb).$You have selected a file with the size larger than 3Mb.$You have selected an image with the dimension larger than 3000x2000.
API String ID: 1944681888-4013501048
Opcode ID: db53ed9e86c52f9cf1fd276464b43294e0c4f6e7b9bf3ea5ce6500d8ea47b909
Instruction ID: 602c555bb4c1e2a523d70d8c740280473e2c328c7d9138f782ffa9abfa287272
Opcode Fuzzy Hash: db53ed9e86c52f9cf1fd276464b43294e0c4f6e7b9bf3ea5ce6500d8ea47b909
Instruction Fuzzy Hash: 27613C70A00258ABDB14EF54DC96BEEBB75FB40314F50465AF91AAB2D0CB34AF81DB44

Function 00BA14C0 Relevance: 38.7, APIs: 21, Strings: 1, Instructions: 157windowCOMMON

Download Yara Rule

APIs

capGetDriverDescriptionA.AVICAP32(?,?,00000050,?,00000050,00000000,?,?,?), ref: 00BA1512
capCreateCaptureWindowA.AVICAP32(My Own Capture Window,C0000000,00000000,00000000,00000140,000000F0,00000000,00000000,?,?,00000050,?,00000050,00000000), ref: 00BA1537
IsWindow.USER32(00000000), ref: 00BA153F
SendMessageA.USER32(00000000,0000040A,?,00000000), ref: 00BA154E
DestroyWindow.USER32(00000000,?,?,?), ref: 00BA1555
memset.MSVCR80 ref: 00BA1590
IsWindow.USER32(00000000), ref: 00BA1599
SendMessageA.USER32(00000000,0000040E,00000004,?), ref: 00BA15A8
MoveWindow.USER32(00000000,00000000,00000000,00000140,000000F0,00000001,?,?,?), ref: 00BA15BB
IsWindow.USER32(00000000), ref: 00BA15C2
SendMessageA.USER32(00000000,00000409,00000000,?), ref: 00BA15D5
IsWindow.USER32(00000000), ref: 00BA15D8
SendMessageA.USER32(00000000,00000405,00000000,00BA1470), ref: 00BA15EB
IsWindow.USER32(00000000), ref: 00BA15EE
SendMessageA.USER32(00000000,00000441,00000060,?), ref: 00BA1601
IsWindow.USER32 ref: 00BA160C
SendMessageA.USER32(00000000,00000440,00000060,?), ref: 00BA161F
IsWindow.USER32(00000000), ref: 00BA1622
SendMessageA.USER32(00000000,00000435,00000000,00000000), ref: 00BA1632
IsWindow.USER32(00000000), ref: 00BA1635
SendMessageA.USER32(00000000,00000434,00000001,00000000), ref: 00BA1645

Strings

My Own Capture Window, xrefs: 00BA1532

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Window$MessageSend$CaptureCreateDescriptionDestroyDriverMovememset
String ID: My Own Capture Window
API String ID: 3791414574-3038378883
Opcode ID: 0af805accc019cbc09aefc913b62cbdd1e4404c3f029119518c14aed9488872d
Instruction ID: 0030be5355f11a678a9938012902d2f3bc3cc9e7c67a44dba6344689713593d9
Opcode Fuzzy Hash: 0af805accc019cbc09aefc913b62cbdd1e4404c3f029119518c14aed9488872d
Instruction Fuzzy Hash: BF41D670785B127BF2609B698D82FAF76DCEF86B40F040454F745EA0C0DBB4E90186AE

Function 00BA68E0 Relevance: 36.9, APIs: 14, Strings: 7, Instructions: 178COMMON

Download Yara Rule

APIs

cvInitSystem.HIGHGUI099(00000000,00000000), ref: 00BA68EC

Part of subcall function 00BA6810: LoadIconA.USER32 ref: 00BA685D
Part of subcall function 00BA6810: LoadCursorA.USER32(00000000,00007F03), ref: 00BA686D
Part of subcall function 00BA6810: GetStockObject.GDI32(00000002), ref: 00BA687F
Part of subcall function 00BA6810: RegisterClassA.USER32(?), ref: 00BA6890
Part of subcall function 00BA6810: GetStockObject.GDI32(00000002), ref: 00BA68A1
Part of subcall function 00BA6810: RegisterClassA.USER32(?), ref: 00BA68B4

cvError.CXCORE099(000000E5,cvNamedWindow,NULL name string,.\window_w32.cpp,00000173), ref: 00BA6912

Strings

.\window_w32.cpp, xrefs: 00BA6901, 00BA69C5, 00BA6A1E
Inner function failed., xrefs: 00BA6A23
cvNamedWindow, xrefs: 00BA690B, 00BA69CF, 00BA6A28
NULL name string, xrefs: 00BA6906
Main HighGUI class, xrefs: 00BA6969
Frame window can not be created, xrefs: 00BA69CA
HighGUI class, xrefs: 00BA69B1

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: ClassLoadObjectRegisterStock$CursorErrorIconInitSystem
String ID: .\window_w32.cpp$Frame window can not be created$HighGUI class$Inner function failed.$Main HighGUI class$NULL name string$cvNamedWindow
API String ID: 574138462-2062437467
Opcode ID: 82927fce1eeaf28245c009250704d5a37a9c69b44b3774bf0d25d52d1a4176b7
Instruction ID: 3de6e26014d4824794cb560998f28467910169d0bef105816f006fd060c3528b
Opcode Fuzzy Hash: 82927fce1eeaf28245c009250704d5a37a9c69b44b3774bf0d25d52d1a4176b7
Instruction Fuzzy Hash: B15108B17443553FD7109F2A9C46F577BD8EB85B20F14026AF608A72D1E7F1E8148B94

Function 004DF9D0 Relevance: 36.8, APIs: 11, Strings: 10, Instructions: 100COMMON

Download Yara Rule

Strings

Hair, xrefs: 004DFB39
Eyebrow, xrefs: 004DFAFD
Objects, xrefs: 004DFA3E
Eyeglasses, xrefs: 004DFB11
Face, xrefs: 004DFB25
Hats, xrefs: 004DFB4D
Static, xrefs: 004DFA91
Face accessories, xrefs: 004DFABF
Dynamic, xrefs: 004DFAA8
Backgrounds, xrefs: 004DFA64

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID:
String ID: Backgrounds$Dynamic$Eyebrow$Eyeglasses$Face$Face accessories$Hair$Hats$Objects$Static
API String ID: 0-1997589367
Opcode ID: 901aaf5dd029739a1d3c8ae11e8e018cde442a6ffa83023b5c9d53f9021075d0
Instruction ID: 0d5221454f0c8e7e8b894d99aff3531fa54f2736b105361686d27a0df3d4384b
Opcode Fuzzy Hash: 901aaf5dd029739a1d3c8ae11e8e018cde442a6ffa83023b5c9d53f9021075d0
Instruction Fuzzy Hash: AC413B30A042199BCB25DF14D8A5BAB7761BB41708F1405BBB41A5B3D0CB79AEC9CB89

Function 00402130 Relevance: 33.7, APIs: 16, Strings: 3, Instructions: 433COMMON

Download Yara Rule

APIs

cvError.CXCORE099(000000FB,cvCylDrawCylinder,Invalid parameter.,.\src\cylaux.cpp,0000009A), ref: 00402670

Part of subcall function 00405340: cvSet.CXCORE099(?,?,?,?,00000000,0040217B), ref: 0040535D

cvGEMM.CXCORE099(?,?), ref: 004021A7
_CIcos.MSVCR80 ref: 004021DD
_CIsin.MSVCR80 ref: 004021EA
cvGEMM.CXCORE099(?,?), ref: 0040225F
cvGEMM.CXCORE099(?,?), ref: 004022C4
cvGEMM.CXCORE099(?,?), ref: 00402325
_CIsqrt.MSVCR80 ref: 004023DC
_CIsqrt.MSVCR80 ref: 004023F7
_CIacos.MSVCR80 ref: 00402431
cvSet2D.CXCORE099(?,?,?), ref: 00402488
_CIcos.MSVCR80 ref: 004024E9
_CIsin.MSVCR80 ref: 00402517
cvGEMM.CXCORE099(?,?), ref: 00402559
cvGEMM.CXCORE099(?,?), ref: 004025DA
cvLine.CXCORE099(?,?,?,?,?), ref: 0040264C

Strings

.\src\cylaux.cpp, xrefs: 0040265F
Invalid parameter., xrefs: 00402664
cvCylDrawCylinder, xrefs: 00402669

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: IcosIsinIsqrt$ErrorIacosLineSet2
String ID: .\src\cylaux.cpp$Invalid parameter.$cvCylDrawCylinder
API String ID: 3689646513-1738803442
Opcode ID: 8deb28bca9f0b0be666a0c88b69cf3ae356be30c15ac8f98f76c123cc54bb843
Instruction ID: ee0604925432baceefbd38c3e5584ac40f80a2529fa49fd9d4d055b72c52293a
Opcode Fuzzy Hash: 8deb28bca9f0b0be666a0c88b69cf3ae356be30c15ac8f98f76c123cc54bb843
Instruction Fuzzy Hash: C8F1A171A05601DBD304AF60D989696BFF0FF84780F614D88E5D4672A9EB3198B4CFC6

Function 004018D0 Relevance: 33.5, APIs: 15, Strings: 4, Instructions: 298COMMON

Download Yara Rule

APIs

cvError.CXCORE099(000000FB,cvCylGetModelPosition,Null pointer to tracker context.,.\src\cyltracker.cpp,00000223,?,?,?), ref: 004018F9
cvError.CXCORE099(000000FB,cvCylGetModelPosition,Null pointer to head config structure.,.\src\cyltracker.cpp,00000226,?,?,?), ref: 00401925

Strings

Null pointer to head config structure., xrefs: 00401919
.\src\cyltracker.cpp, xrefs: 004018E8, 00401914
Null pointer to tracker context., xrefs: 004018ED
cvCylGetModelPosition, xrefs: 004018F2, 0040191E

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Error
String ID: .\src\cyltracker.cpp$Null pointer to head config structure.$Null pointer to tracker context.$cvCylGetModelPosition
API String ID: 2619118453-1894096719
Opcode ID: 94b001c55bfdf0bd65362a55d97ec9160b4cac4fd4508785464b6c2c950edd66
Instruction ID: 9f04fb016eb92f5e31f0ef4e1e4ba15881229676976377827f4aa03fecfd0c42
Opcode Fuzzy Hash: 94b001c55bfdf0bd65362a55d97ec9160b4cac4fd4508785464b6c2c950edd66
Instruction Fuzzy Hash: 95C12770609210EFC354AF14D58996ABFB0FF84340F929D98F4E5672A9D730E971CB86

Function 0041EFD0 Relevance: 33.5, APIs: 15, Strings: 4, Instructions: 268windowCOMMON

Download Yara Rule

APIs

Part of subcall function 004078E0: GetClientRect.USER32(?,00000000), ref: 004078F1

GetSysColorBrush.USER32(0000000F), ref: 0041F03F
FillRect.USER32(00000000,000000FF,00000000), ref: 0041F053
LoadIconW.USER32(00000000,00000087), ref: 0041F0A1
DrawIconEx.USER32(00000000,0000000A,0000000A,00529873,0000000A,0000000A,00000000,00000000,00000003), ref: 0041F0D3
DeleteObject.GDI32(00529873), ref: 0041F0DD
SetBkMode.GDI32(00000000,00000001), ref: 0041F110
GetTextColor.GDI32(00000000), ref: 0041F11F
SetTextColor.GDI32(00000000,00000000), ref: 0041F130
memset.MSVCR80 ref: 0041F1DA

Part of subcall function 00417240: CreateFontIndirectW.GDI32(00409661), ref: 0041724B

SelectObject.GDI32(00000000,00000000), ref: 0041F21A
memset.MSVCR80 ref: 0041F293
memset.MSVCR80 ref: 0041F2BA
wcslen.MSVCR80 ref: 0041F35E
DrawTextW.USER32(00000000,?,00000000), ref: 0041F385
SelectObject.GDI32(00000000,?), ref: 0041F39D

Strings

this codec doesn, xrefs: 0041F27B
Verdana, xrefs: 0041F1A0
visit the ManyCam website help page , xrefs: 0041F2A0
This feature requires a special video codec to function properly. Unfortunately, xrefs: 0041F22B

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: ColorObjectTextmemset$DrawIconRectSelect$BrushClientCreateDeleteFillFontIndirectLoadModewcslen
String ID: This feature requires a special video codec to function properly. Unfortunately$Verdana$this codec doesn$visit the ManyCam website help page
API String ID: 923866622-1098169901
Opcode ID: 3f31620da8421e62cd21c6cfa0caa7031ff0a88d6dc715023633d5f283328bfa
Instruction ID: 6f95be4a3cc1c25362b5af6b12462e5a34df96a0e09e544e1f1783aa57f49324
Opcode Fuzzy Hash: 3f31620da8421e62cd21c6cfa0caa7031ff0a88d6dc715023633d5f283328bfa
Instruction Fuzzy Hash: 83D1F7B0D002189FDB14DF99DC54BDEBBB8BF58304F1081AAE509AB391DB746A89CF54

Function 004D1F20 Relevance: 31.9, APIs: 15, Strings: 3, Instructions: 394windowCOMMON

Download Yara Rule

APIs

Part of subcall function 00438A10: clock.MSVCR80 ref: 00438AA7
Part of subcall function 00438A10: _DebugHeapAllocator.LIBCPMTD ref: 00438AC5

Concurrency::cancellation_token_source::~cancellation_token_source.LIBCPMTD ref: 004D2030
GetTickCount.KERNEL32 ref: 004D2076
Concurrency::cancellation_token_source::~cancellation_token_source.LIBCPMTD ref: 004D20A0
Concurrency::cancellation_token_source::~cancellation_token_source.LIBCPMTD ref: 004D212D
Concurrency::cancellation_token_source::~cancellation_token_source.LIBCPMTD ref: 004D21FB
Concurrency::cancellation_token_source::~cancellation_token_source.LIBCPMTD ref: 004D228A
Concurrency::cancellation_token_source::~cancellation_token_source.LIBCPMTD ref: 004D22EE
Concurrency::cancellation_token_source::~cancellation_token_source.LIBCPMTD ref: 004D2358
Concurrency::cancellation_token_source::~cancellation_token_source.LIBCPMTD ref: 004D23CB
GetTickCount.KERNEL32 ref: 004D23FB
IsWindow.USER32(?), ref: 004D243D
PostMessageW.USER32(?,00008190,000000FF,FFFFFFFF), ref: 004D245E
SendMessageW.USER32(00000000,00008194,00000000,?), ref: 004D249E
Concurrency::cancellation_token_source::~cancellation_token_source.LIBCPMTD ref: 004D24B5
Concurrency::cancellation_token_source::~cancellation_token_source.LIBCPMTD ref: 004D24E2

Part of subcall function 00438AF0: clock.MSVCR80 ref: 00438B1F

Strings

fUS, xrefs: 004D2447
CPlayList::ActivateItem (%s) pos=%d reset=%d, xrefs: 004D1F6A
Couldn't activate item., xrefs: 004D221C

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Concurrency::cancellation_token_source::~cancellation_token_source$CountMessageTickclock$AllocatorDebugHeapPostSendWindow
String ID: CPlayList::ActivateItem (%s) pos=%d reset=%d$Couldn't activate item.$fUS
API String ID: 2714024287-817954826
Opcode ID: 72d5d28fb81e9cb43a23bfa0ae115a46047e039f4e0d0dee57b90eda3ef89231
Instruction ID: cd11fd919a321e88f285589761f8251e1514877f7c039c8d1d7105039d16572d
Opcode Fuzzy Hash: 72d5d28fb81e9cb43a23bfa0ae115a46047e039f4e0d0dee57b90eda3ef89231
Instruction Fuzzy Hash: FA027970A00218DFDB14DBA4CD61BEEBBB1AF55308F14819EE5096B382CB746E89CF55

Function 004C8720 Relevance: 31.8, APIs: 17, Strings: 1, Instructions: 318COMMON

Download Yara Rule

APIs

Part of subcall function 00438A10: clock.MSVCR80 ref: 00438AA7
Part of subcall function 00438A10: _DebugHeapAllocator.LIBCPMTD ref: 00438AC5

Concurrency::cancellation_token_source::~cancellation_token_source.LIBCPMTD ref: 004C878C
Concurrency::cancellation_token_source::~cancellation_token_source.LIBCPMTD ref: 004C879B
Concurrency::cancellation_token_source::~cancellation_token_source.LIBCPMTD ref: 004C87D2
Concurrency::cancellation_token_source::~cancellation_token_source.LIBCPMTD ref: 004C87E1

Part of subcall function 00438AF0: clock.MSVCR80 ref: 00438B1F

Strings

CManyCamModel::UpdateGraphTopologyOnSourceChange, xrefs: 004C8755

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Concurrency::cancellation_token_source::~cancellation_token_source$clock$AllocatorDebugHeap
String ID: CManyCamModel::UpdateGraphTopologyOnSourceChange
API String ID: 952932671-1321120180
Opcode ID: 0b90ff5f2a21a3f5109c721d4de8bebc9373ba52e13293d6d0797d08fd4d5099
Instruction ID: 10940e179f8bca40d99c735d3df1e6ff842ee16e2e5db1de052c77a05b9f2183
Opcode Fuzzy Hash: 0b90ff5f2a21a3f5109c721d4de8bebc9373ba52e13293d6d0797d08fd4d5099
Instruction Fuzzy Hash: 5BE13E70D04248DECB04EFA5D961BEEBBB0AF15308F10815FF4166B282EF785A45DB99

Function 004B2A80 Relevance: 31.7, APIs: 3, Strings: 15, Instructions: 169COMMON

Download Yara Rule

APIs

Part of subcall function 004B76D0: fwprintf.MSVCR80 ref: 004B7764
Part of subcall function 004B76D0: fflush.MSVCR80 ref: 004B7774

StringFromGUID2.OLE32()K,?,00000040,)K,0056F910,)K,00574DDC), ref: 004B2C30

Strings

Major type = %s, xrefs: 004B2B11
vids, xrefs: 004B2AD1
Subtype = %s, xrefs: 004B2BBE
Frame size = %dx%d, xrefs: 004B2CB3
Major type = MEDIATYPE_Video, xrefs: 004B2AE3
Subtype = MEDIASUBTYPE_RGB32, xrefs: 004B2B8D
Major type = GUID_NULL, xrefs: 004B2ABD
Subtype = MEDIASUBTYPE_RGB24, xrefs: 004B2B64
Format type = GUID_NULL, xrefs: 004B2BE5
Format type = FORMAT_VideoInfo, xrefs: 004B2C0C
Mediatype info:, xrefs: 004B2A99
)K, xrefs: 004B2AB0, 004B2AD6, 004B2B00, 004B2B28, 004B2B54, 004B2B7D, 004B2BAA, 004B2BD5, 004B2BFC, 004B2C29, 004B2C54, 004B2C64, 004B2C6D, 004B2C76, 004B2AB3, 004B2AD9, 004B2B03, 004B2B2E, 004B2B5A, 004B2B83, 004B2BB0, 004B2BDB, 004B2C02, 004B2C2F, 004B2C5A
Format type = %s, xrefs: 004B2C3D
Subtype = GUID_NULL, xrefs: 004B2B38
Bit count = %d, xrefs: 004B2C8D

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: FromStringfflushfwprintf
String ID: Bit count = %d$Format type = %s$Format type = FORMAT_VideoInfo$Format type = GUID_NULL$Frame size = %dx%d$Major type = %s$Major type = GUID_NULL$Major type = MEDIATYPE_Video$Mediatype info:$Subtype = %s$Subtype = GUID_NULL$Subtype = MEDIASUBTYPE_RGB24$Subtype = MEDIASUBTYPE_RGB32$vids$)K
API String ID: 2684700382-3987823964
Opcode ID: e2d8f3dbb539b25badfc673ac368b6ee49d21c1c39eb2143ec57eff8d32f1992
Instruction ID: 0a30e523ff0296b33be7bff9fb0a9039800934aade4f4bd872009a2dad4e24fd
Opcode Fuzzy Hash: e2d8f3dbb539b25badfc673ac368b6ee49d21c1c39eb2143ec57eff8d32f1992
Instruction Fuzzy Hash: A951C870E5420867DB10AF19DC57EDE3B34BF44705F00841AB908A6283EFB4EA59D7BA

Function 00BA6090 Relevance: 30.2, APIs: 20, Instructions: 218COMMON

Download Yara Rule

APIs

Part of subcall function 00BA4A80: GetWindowLongA.USER32(?,000000EB), ref: 00BA4A83

DefWindowProcA.USER32(?,?,?,?), ref: 00BA60B6

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Window$LongProc
String ID:
API String ID: 2275667008-0
Opcode ID: a9f830eb557332d2d0ac9df1cebfec7629a7846dd7133afe13ecb1846cf61ed5
Instruction ID: 3be7c0d4130fd8ff94f9311f4ea826c547a22c2bfa2741ccb9b7524cf38e5caa
Opcode Fuzzy Hash: a9f830eb557332d2d0ac9df1cebfec7629a7846dd7133afe13ecb1846cf61ed5
Instruction Fuzzy Hash: 087188B5208241AFD310DB68DD84E6BBBE8FB89314F044A1DFA4587251DBB1ED05CBA2

Function 00402C80 Relevance: 30.2, APIs: 20, Instructions: 174COMMON

Download Yara Rule

APIs

Part of subcall function 00403140: cvCreateImage.CXCORE099(?,?,00000008,00000001,?,00000000,?,0040120F), ref: 00403198
Part of subcall function 00403140: cvCreateImage.CXCORE099(?,?,80000010,00000001,?,00000000,?,0040120F), ref: 004031AF
Part of subcall function 00403140: cvCreateImage.CXCORE099(?,?,80000010,00000001,?,?,?,?,?,00000000,?,0040120F), ref: 004031C7

cvCreateMat.CXCORE099(00000004,00000004,00000005,0040120F), ref: 00402C98
cvCreateMat.CXCORE099(00000004,00000004,00000005,?,?,?,0040120F), ref: 00402CB4
cvCreateMat.CXCORE099(00000004,00000004,00000005,?,?,?,?,?,?,0040120F), ref: 00402CD0
cvCreateMat.CXCORE099(00000004,00000004,00000005,?,?,?,?,?,?,?,?,?,0040120F), ref: 00402CEC
cvCreateMat.CXCORE099(00000004,00000004,00000005,?,?,?,?,?,?,?,?,?,?,?,?,0040120F), ref: 00402D08
cvCreateMat.CXCORE099(00000004,00000004,00000005), ref: 00402D24
cvCreateMat.CXCORE099(00000004,00000004,00000005), ref: 00402D40
cvCreateMat.CXCORE099(00000003,00000004,00000005), ref: 00402D5C
cvCreateMat.CXCORE099(00000003,00000004,00000005), ref: 00402D78
cvCreateMat.CXCORE099(00000004,00000001,00000005), ref: 00402D94
cvCreateMat.CXCORE099(00000004,00000001,00000005), ref: 00402DB0
cvCreateMat.CXCORE099(00000004,00000001,00000005), ref: 00402DCC
cvCreateMat.CXCORE099(00000004,00000001,00000005), ref: 00402DE8
cvCreateMat.CXCORE099(00000003,00000001,00000005), ref: 00402E04
cvCreateMat.CXCORE099(00000006,00000006,00000005), ref: 00402E20
cvCreateMat.CXCORE099(00000006,00000001,00000005), ref: 00402E38
cvCreateMat.CXCORE099(00000006,00000001,00000005), ref: 00402E50
cvCreateMat.CXCORE099(00000004,00000004,00000005), ref: 00402E68
cvCreateMat.CXCORE099(00000004,00000001,00000005), ref: 00402E80
cvCreateMat.CXCORE099(00000004,00000001,00000005), ref: 00402E98

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Create$Image
String ID:
API String ID: 1237808576-0
Opcode ID: ae6bf935b923b4879af12b20d1e7ba834aac778abf3f025c7bd5bd2a014dc142
Instruction ID: 61334a59a6328505146fa154266dd27d5a2e39e93b606410563eabcbac9550f4
Opcode Fuzzy Hash: ae6bf935b923b4879af12b20d1e7ba834aac778abf3f025c7bd5bd2a014dc142
Instruction Fuzzy Hash: 225106B0A81B027AF67057719E0BB9326912B26B01F050539BB4DB83C6FBF59521CA99

Function 004B8960 Relevance: 30.1, APIs: 7, Strings: 10, Instructions: 397COMMON

Download Yara Rule

Strings

Creating new entry for camera %s, xrefs: 004B8D86
Error: camera name is empty., xrefs: 004B89BB
Desired frame size is invalid., xrefs: 004B8A49
Moniker is NULL., xrefs: 004B89FF
CManyCamGraphMgr::AddCameraInput, xrefs: 004B8995
Destroy the graph for camera %s, xrefs: 004B8B94
Creating the graph for camera %s, xrefs: 004B8C3E
Failed to create the graph with hr=%X, xrefs: 004B8C85
Graph creation failed with hr=%X, xrefs: 004B8E3F
Such camera is already in the list: %s, xrefs: 004B8AC7

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: clock$AllocatorDebugHeapfflushfwprintf
String ID: CManyCamGraphMgr::AddCameraInput$Creating new entry for camera %s$Creating the graph for camera %s$Desired frame size is invalid.$Destroy the graph for camera %s$Error: camera name is empty.$Failed to create the graph with hr=%X$Graph creation failed with hr=%X$Moniker is NULL.$Such camera is already in the list: %s
API String ID: 2739697835-1067953073
Opcode ID: 8320536623643fb9a82ccd93883c4b51503a044c0bfe6443a3796fe1dcf3ba29
Instruction ID: 0c2db78db8441f90a5655b608386306daf3177cd87543fca05d57ae7838a8fe2
Opcode Fuzzy Hash: 8320536623643fb9a82ccd93883c4b51503a044c0bfe6443a3796fe1dcf3ba29
Instruction Fuzzy Hash: F5024C70900208EFDB14EF95CC92BEEBBB5BF54304F10415EE5066B2D2DB786A45CBA9

Function 00402EC0 Relevance: 30.1, APIs: 20, Instructions: 126COMMON

Download Yara Rule

APIs

Part of subcall function 004032A0: cvReleaseImage.CXCORE099(004012A4,00000100,004012A0,00000000,00402ECD,00000000,?,00401305,?,?,004012A0,?), ref: 004032CA
Part of subcall function 004032A0: cvReleaseImage.CXCORE099(004012A8,00000100,004012A0,00000000,00402ECD,00000000,?,00401305,?,?,004012A0,?), ref: 004032DC
Part of subcall function 004032A0: cvReleaseImage.CXCORE099(004012AC,00000100,004012A0,00000000,00402ECD,00000000,?,00401305,?,?,004012A0,?), ref: 004032EA
Part of subcall function 004032A0: cvReleaseImage.CXCORE099(004012C0,00000100,004012A0,00000000,00402ECD,00000000,?,00401305,?,?,004012A0,?), ref: 00403302
Part of subcall function 004032A0: cvReleaseImage.CXCORE099(004012C4,00000100,004012A0,00000000,00402ECD,00000000,?,00401305,?,?,004012A0,?), ref: 00403314
Part of subcall function 004032A0: cvReleaseImage.CXCORE099(004012C8,00000100,004012A0,00000000,00402ECD,00000000,?,00401305,?,?,004012A0,?), ref: 00403326

cvReleaseMat.CXCORE099(00000118,?), ref: 00402ED9
cvReleaseMat.CXCORE099(00000114), ref: 00402EEB
cvReleaseMat.CXCORE099(0000011C), ref: 00402EFD
cvReleaseMat.CXCORE099(00000120), ref: 00402F0F
cvReleaseMat.CXCORE099(00000124), ref: 00402F21
cvReleaseMat.CXCORE099(00000128), ref: 00402F33
cvReleaseMat.CXCORE099(0000012C), ref: 00402F45
cvReleaseMat.CXCORE099(00000130), ref: 00402F57
cvReleaseMat.CXCORE099(00000134), ref: 00402F69
cvReleaseMat.CXCORE099(00000100), ref: 00402F77
cvReleaseMat.CXCORE099(00000104), ref: 00402F89
cvReleaseMat.CXCORE099(00000110), ref: 00402F9B
cvReleaseMat.CXCORE099(00000108), ref: 00402FAD
cvReleaseMat.CXCORE099(0000010C), ref: 00402FBF
cvReleaseMat.CXCORE099(00000138), ref: 00402FD1
cvReleaseMat.CXCORE099(0000013C), ref: 00402FE3
cvReleaseMat.CXCORE099(00000140), ref: 00402FF5
cvReleaseMat.CXCORE099(00000144), ref: 00403007
cvReleaseMat.CXCORE099(00000148), ref: 00403019
cvReleaseMat.CXCORE099(0000014C), ref: 0040302C

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Release$Image
String ID:
API String ID: 1442443227-0
Opcode ID: 18739cc84c4e819f13137b706e7aec6c30c3c301381e9e13cdbf496b20ef20f3
Instruction ID: e9e9c9bdbcc23bd9ce4fc92c64f6ef92138ef717c9158f18fb2c09d524048864
Opcode Fuzzy Hash: 18739cc84c4e819f13137b706e7aec6c30c3c301381e9e13cdbf496b20ef20f3
Instruction Fuzzy Hash: 3A415AB1C01B11ABDA70DB60D94EB97B6EC7F01300F44493E914B929D0EB79F658CAA3

Function 004AF1A0 Relevance: 30.0, APIs: 2, Strings: 15, Instructions: 270comCOMMON

Download Yara Rule

APIs

Part of subcall function 00438A10: clock.MSVCR80 ref: 00438AA7
Part of subcall function 00438A10: _DebugHeapAllocator.LIBCPMTD ref: 00438AC5

CoCreateInstance.OLE32(0056F320,00000000,00000001,00571B10,00000000,?,00000000,?,?,4FF694EA), ref: 004AF229

Part of subcall function 004B76D0: fwprintf.MSVCR80 ref: 004B7764
Part of subcall function 004B76D0: fflush.MSVCR80 ref: 004B7774

CoCreateInstance.OLE32(0056F2E0,00000000,00000001,00571B40,00000000,00000000,00000000,?,?,4FF694EA), ref: 004AF297

Strings

Creating an instance of IGraphBuilder., xrefs: 004AF1FD
Failed with hr = %X., xrefs: 004AF2AA
Getting IMediaEventEx interface., xrefs: 004AF41F
Failed with hr = %X., xrefs: 004AF4DD
Creating cature graph builder., xrefs: 004AF26B
Failed with hr = %X., xrefs: 004AF37E
Getting IMediaSeeking Interface., xrefs: 004AF3A9
Getting IMediaControlInterface., xrefs: 004AF333
Failed with hr = %X., xrefs: 004AF3F4
Failed with hr = %X., xrefs: 004AF308
Getting IMediaFilter interface., xrefs: 004AF492
Failed with hr = %X., xrefs: 004AF46A
Failed with hr = %X., xrefs: 004AF23C
Init cap graph builder., xrefs: 004AF2C1
CGraphMgr::InitInternalInterfaces, xrefs: 004AF1C8

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: CreateInstance$AllocatorDebugHeapclockfflushfwprintf
String ID: CGraphMgr::InitInternalInterfaces$Creating an instance of IGraphBuilder.$Creating cature graph builder.$Failed with hr = %X.$Failed with hr = %X.$Failed with hr = %X.$Failed with hr = %X.$Failed with hr = %X.$Failed with hr = %X.$Failed with hr = %X.$Getting IMediaControlInterface.$Getting IMediaEventEx interface.$Getting IMediaFilter interface.$Getting IMediaSeeking Interface.$Init cap graph builder.
API String ID: 3340919952-3253057602
Opcode ID: 9b086fe0cb3031e3bc22e440be552398c93d060f0653d1dd36aa5157d34c403a
Instruction ID: 91a63dad0f67e3e0232ba0b1807ee47d54ee56e4fdf06e0acade68bce617adf4
Opcode Fuzzy Hash: 9b086fe0cb3031e3bc22e440be552398c93d060f0653d1dd36aa5157d34c403a
Instruction Fuzzy Hash: 10A18270E402099BDB04EBD9DC62BBE77B0BF99719F10402EF80677282DB796905C769

Function 00BA2C30 Relevance: 29.9, APIs: 11, Strings: 6, Instructions: 157COMMON

Download Yara Rule

APIs

cvGetMat.CXCORE099(?,?,00000000,00000000), ref: 00BA2C6F
cvGetErrStatus.CXCORE099 ref: 00BA2C79
cvError.CXCORE099(000000FF,cvSaveImage,Inner function failed.,.\loadsave.cpp,000001C4), ref: 00BA2C98
cvError.CXCORE099(000000F1,cvSaveImage,00BED488,.\loadsave.cpp,000001CB), ref: 00BA2CEB
cvError.CXCORE099(000000FE,cvSaveImage,could not save the image,.\loadsave.cpp,000001D9), ref: 00BA2D1C
cvFlip.CXCORE099(?,?,00000000), ref: 00BA2D44
cvGetErrStatus.CXCORE099(?,?,?,?,?,?,?,?,?,?,?,?,?,00BA2287,?,?), ref: 00BA2D4E
cvFlip.CXCORE099(00000000,00000000,00000000), ref: 00BA2D6D
cvGetErrStatus.CXCORE099(?,?,?), ref: 00BA2D75
cvError.CXCORE099(000000E5,cvSaveImage,null filename,.\loadsave.cpp,000001C2), ref: 00BA2DEA
cvGetErrStatus.CXCORE099 ref: 00BA2DF2

Strings

Inner function failed., xrefs: 00BA2C8C, 00BA2D88
could not find a filter for the specified extension, xrefs: 00BA2D10
could not save the image, xrefs: 00BA2DCA
.\loadsave.cpp, xrefs: 00BA2C87, 00BA2CDA, 00BA2D0B, 00BA2D83, 00BA2DC5, 00BA2DD9
null filename, xrefs: 00BA2DDE
cvSaveImage, xrefs: 00BA2C91, 00BA2CE4, 00BA2D15, 00BA2D8D, 00BA2DE3

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: ErrorStatus$Flip
String ID: .\loadsave.cpp$Inner function failed.$could not find a filter for the specified extension$could not save the image$cvSaveImage$null filename
API String ID: 2640733558-2883540358
Opcode ID: 58d04a88dc8b5ef89b53583921109956a28ae6d1c7fb440119ce6cc15562ae5c
Instruction ID: e2b26a42e4b412c42a1814b0c2f65b0ff1856ced56681f428b9bc97e358353a9
Opcode Fuzzy Hash: 58d04a88dc8b5ef89b53583921109956a28ae6d1c7fb440119ce6cc15562ae5c
Instruction Fuzzy Hash: 2941697264C3007BDB206B1C8C52E6F77E5DB9AB10F1441E9FD556B2D2E7B2DC4482A2

Function 004A8E90 Relevance: 28.3, APIs: 15, Strings: 1, Instructions: 328memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 00416740: _DebugHeapAllocator.LIBCPMTD ref: 00416795

_DebugHeapAllocator.LIBCPMTD ref: 004A8F0A

Part of subcall function 0040EA00: _DebugHeapAllocator.LIBCPMTD ref: 0040EA0E

Part of subcall function 004164A0: FindFirstFileW.KERNEL32(00000000,00000104,000000D8,00000104,00000000), ref: 004164F5

wcscmp.MSVCR80 ref: 004A8F3A
wcscmp.MSVCR80 ref: 004A8F53
wcscmp.MSVCR80 ref: 004A8F80
_DebugHeapAllocator.LIBCPMTD ref: 004A92EC
_DebugHeapAllocator.LIBCPMTD ref: 004A9304
_DebugHeapAllocator.LIBCPMTD ref: 004A9324

Strings

InternalProperties, xrefs: 004A8F7B

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$wcscmp$FileFindFirst
String ID: InternalProperties
API String ID: 1222566788-1350816593
Opcode ID: c6da74deea4d9cd51fd66fbdb8e43503fd6c04aced2bb07cda00fcb46decaaae
Instruction ID: d461dac8b76a5e630202117bde1037354cd356562fc5738dbdf76f67a61ac83d
Opcode Fuzzy Hash: c6da74deea4d9cd51fd66fbdb8e43503fd6c04aced2bb07cda00fcb46decaaae
Instruction Fuzzy Hash: 30F13AB49001199FDB14DF54CC94BAEB7B5BF55304F1085DAEA0AA7381DB34AE88CF68

Function 004010A0 Relevance: 28.2, APIs: 8, Strings: 8, Instructions: 187COMMON

Download Yara Rule

APIs

cvError.CXCORE099(000000FB,cvCylCreateTrackerContext,Invalid frame size.,.\src\cyltracker.cpp,00000064), ref: 004012DF

Strings

Invalid pyramid type., xrefs: 0040112A
.\src\cyltracker.cpp, xrefs: 004010E7, 00401108, 00401125, 00401272, 004012A8, 004012CE
cvCylCreateTrackerContext, xrefs: 0040127C, 004012B2, 004012D8
Invalid method., xrefs: 004010EC
Insufficient memory for initializing tracker, xrefs: 004012AD
Insufficient memory., xrefs: 00401277
Invalid frame size., xrefs: 004012D3
Invalid model type., xrefs: 0040110D

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Error
String ID: .\src\cyltracker.cpp$Insufficient memory for initializing tracker$Insufficient memory.$Invalid frame size.$Invalid method.$Invalid model type.$Invalid pyramid type.$cvCylCreateTrackerContext
API String ID: 2619118453-4185331338
Opcode ID: 159e2c39b6469685c728ac88f41f5128306c1347d163a9cc52779d86d74ae199
Instruction ID: 99194e5ea39f0bab6f8ac41c15566c549df518491d95b6df1d49c7cd51309a21
Opcode Fuzzy Hash: 159e2c39b6469685c728ac88f41f5128306c1347d163a9cc52779d86d74ae199
Instruction Fuzzy Hash: 6F51F5B6B4031157DB149E58AC82BA67790BB85710F0881BEFE0CBF3D2E6759904C7A6

Function 00BA2A40 Relevance: 28.1, APIs: 12, Strings: 4, Instructions: 145COMMON

Download Yara Rule

APIs

cvCreateMat.CXCORE099(?,?,?), ref: 00BA2AD3
cvGetErrStatus.CXCORE099 ref: 00BA2ADF
cvCreateImage.CXCORE099(?,?,00000008,?), ref: 00BA2AF4
cvGetErrStatus.CXCORE099 ref: 00BA2B00
cvError.CXCORE099(000000FF,cvLoadImage,Inner function failed.,.\loadsave.cpp,00000189), ref: 00BA2B1F
cvGetMat.CXCORE099(?,?,00000000,00000000), ref: 00BA2B37
cvReleaseMat.CXCORE099(?), ref: 00BA2B6A
cvGetErrStatus.CXCORE099(?,?,?,?,?,?,?,00BA2BFF,00000000,00BA2123,?,?), ref: 00BA2B7D
cvReleaseMat.CXCORE099 ref: 00BA2B93
cvReleaseImage.CXCORE099(?), ref: 00BA2BB2
cvError.CXCORE099(000000E5,cvLoadImage,null filename,.\loadsave.cpp,00000174,?,?,?,?,?,?,?,00BA2BFF,00000000,00BA2123,?), ref: 00BA2BCF
cvReleaseImage.CXCORE099(?), ref: 00BA2BDE

Strings

Inner function failed., xrefs: 00BA2B13
.\loadsave.cpp, xrefs: 00BA2B0E, 00BA2BBE
null filename, xrefs: 00BA2BC3
cvLoadImage, xrefs: 00BA2B18, 00BA2BC8

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Release$ImageStatus$CreateError
String ID: .\loadsave.cpp$Inner function failed.$cvLoadImage$null filename
API String ID: 3787916741-4128775367
Opcode ID: b44ba948db9be664b062bd0654beabbd1ed1ed98b092a3d52ae8887189c55ba0
Instruction ID: 12effa7c66f0562814447cae93f40b1c6c60ba328cd3fe03e17723fda015c333
Opcode Fuzzy Hash: b44ba948db9be664b062bd0654beabbd1ed1ed98b092a3d52ae8887189c55ba0
Instruction Fuzzy Hash: 8041E2B160C3006FD720EF28CC42F6AB7E59F96700F5889D8F95547291EB72E90887A2

Function 004735B0 Relevance: 26.6, APIs: 7, Strings: 8, Instructions: 324COMMON

Download Yara Rule

APIs

Part of subcall function 00416740: _DebugHeapAllocator.LIBCPMTD ref: 00416795

Part of subcall function 00474150: _DebugHeapAllocator.LIBCPMTD ref: 00474184

Concurrency::details::ContextBase::GetWorkQueueIdentity.LIBCMTD ref: 00473611

Part of subcall function 0040EDB0: _DebugHeapAllocator.LIBCPMTD ref: 0040EDE7

swscanf.MSVCR80 ref: 00473710
swscanf.MSVCR80 ref: 0047372B
swscanf.MSVCR80 ref: 00473746

Strings

Error parsing color field: unexpected symbols '%s'., xrefs: 004739E1
Error parsing color field: one of color components is not specified, xrefs: 00473803
Success., xrefs: 00473A16
rgb(, xrefs: 0047378C
Error parsing color field: one of color components is not specified, xrefs: 00473891
Unspecified error., xrefs: 004735EB
Error parsing color field: one of color components is not specified, xrefs: 0047392B
Error parsing color field: wrong number of symbols after '#', xrefs: 00473689

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeapswscanf$Base::Concurrency::details::ContextIdentityQueueWork
String ID: Error parsing color field: one of color components is not specified$Error parsing color field: one of color components is not specified$Error parsing color field: one of color components is not specified$Error parsing color field: unexpected symbols '%s'.$Error parsing color field: wrong number of symbols after '#'$Success.$Unspecified error.$rgb(
API String ID: 1122337173-231897244
Opcode ID: 683619098a5f14be788e1fbab1df8c809ac1bea4690c2859a926c6c666e65a2e
Instruction ID: 514317ef524717ef2c7c16df4d54ca1b957cd51d0b51933f763c983e9b3e5875
Opcode Fuzzy Hash: 683619098a5f14be788e1fbab1df8c809ac1bea4690c2859a926c6c666e65a2e
Instruction Fuzzy Hash: 64D16F71901208EEDB04EBA5DC56BEEBB74AF10304F50816EF41AA72D1DB786B48CB95

Function 00BD0110 Relevance: 26.5, APIs: 9, Strings: 6, Instructions: 223COMMON

Download Yara Rule

APIs

_ftol.MSVCR80 ref: 00BD0190
_ftol.MSVCR80 ref: 00BD01B0
_ftol.MSVCR80 ref: 00BD0240
_ftol.MSVCR80 ref: 00BD0260
_ftol.MSVCR80 ref: 00BD02F0
_ftol.MSVCR80 ref: 00BD0310
_ftol.MSVCR80 ref: 00BD0398
_ftol.MSVCR80 ref: 00BD03B8
fprintf.MSVCR80 ref: 00BD0458

Strings

Invalid cHRM blue point specified, xrefs: 00BD03E9
white_x=%f, white_y=%f, xrefs: 00BD0452
cHRM, xrefs: 00BD03D3
Invalid cHRM green point specified, xrefs: 00BD03FF
Invalid cHRM white point specified, xrefs: 00BD042B
Invalid cHRM red point specified, xrefs: 00BD0415

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: _ftol$fprintf
String ID: Invalid cHRM blue point specified$Invalid cHRM green point specified$Invalid cHRM red point specified$Invalid cHRM white point specified$cHRM$white_x=%f, white_y=%f
API String ID: 3291409459-3520686153
Opcode ID: 4f57bba3a845f9c898a1b3a866f9fa4b97d0e89eeb30578d74f5eac8148f2bcf
Instruction ID: e92cd52e566460fd5fe643fe5463fceb1a4e5e871e76486b81319d7d785f0fac
Opcode Fuzzy Hash: 4f57bba3a845f9c898a1b3a866f9fa4b97d0e89eeb30578d74f5eac8148f2bcf
Instruction Fuzzy Hash: 047181B1404649A3EB04AB51E94DB5BBBF8FFC9780F040ADCB2D516269DF74D4A58703

Function 00401E00 Relevance: 26.4, APIs: 12, Strings: 3, Instructions: 165COMMON

Download Yara Rule

APIs

cvCreateImage.CXCORE099(?,?,00000008,00000001), ref: 00401E39
cvCreateImage.CXCORE099(?,?,00000008,00000001), ref: 00401E7D
cvCvtColor.CV099(?,?,00000006,?,?,00000008,00000001), ref: 00401E8E
cvResize.CV099(?,?,00000001), ref: 00401EA2
cvEqualizeHist.CV099(?,?), ref: 00401EB0
cvClearMemStorage.CXCORE099(?,?,?), ref: 00401EB6
cvHaarDetectObjects.CV099(?,?,?,0000001E,0000001E), ref: 00401EDE
cvReleaseImage.CXCORE099(?), ref: 00401EED
cvReleaseImage.CXCORE099(?), ref: 00401EFA
cvGetSeqElem.CXCORE099(00000000,00000000), ref: 00401F0F
cvClearSeq.CXCORE099(00000000), ref: 00401FC9
cvError.CXCORE099(000000FE,auxDetectFace,Invalid input data,.\src\cylaux.cpp,0000002C), ref: 00401FF0

Strings

auxDetectFace, xrefs: 00401FE9
.\src\cylaux.cpp, xrefs: 00401FDF
Invalid input data, xrefs: 00401FE4

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Image$ClearCreateRelease$ColorDetectElemEqualizeErrorHaarHistObjectsResizeStorage
String ID: .\src\cylaux.cpp$Invalid input data$auxDetectFace
API String ID: 2437743724-1894629017
Opcode ID: 2bb4529f379278a41ca53a7c36763ca3dde82cfa4019168cc177150fd70c6ded
Instruction ID: ac98781828b75c9019f3c1cd100c5520617b492f8a1ed74b89b13fa435fe6163
Opcode Fuzzy Hash: 2bb4529f379278a41ca53a7c36763ca3dde82cfa4019168cc177150fd70c6ded
Instruction Fuzzy Hash: 0951B170608710ABD300AF14E84AA2BBBE4FFC8714F054E58F489672A5DA31D974CB56

Function 00BA5160 Relevance: 26.4, APIs: 11, Strings: 4, Instructions: 164COMMON

Download Yara Rule

APIs

cvError.CXCORE099(000000E5,cvShowImage,NULL name,.\window_w32.cpp,0000026B), ref: 00BA51BF
cvGetMat.CXCORE099(?,?,00000000,00000000), ref: 00BA5211
cvGetErrStatus.CXCORE099 ref: 00BA521F
cvError.CXCORE099(000000FF,cvShowImage,Inner function failed.,.\window_w32.cpp,00000274), ref: 00BA523E

Strings

.\window_w32.cpp, xrefs: 00BA51AE, 00BA522D
Inner function failed., xrefs: 00BA5232
NULL name, xrefs: 00BA51B3
cvShowImage, xrefs: 00BA51B8, 00BA5237

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Error$Status
String ID: .\window_w32.cpp$Inner function failed.$NULL name$cvShowImage
API String ID: 483703942-1490608787
Opcode ID: d0535ba4ca1c2e80e8f24903e6f1c537840975586f7d38695381ee585f3ebadf
Instruction ID: f7f206282ac86e92b068c23b6310fc17ce580e87a2568c9613683a6010b39daa
Opcode Fuzzy Hash: d0535ba4ca1c2e80e8f24903e6f1c537840975586f7d38695381ee585f3ebadf
Instruction Fuzzy Hash: 1451D2B26083409FD720DF64DC81B5FB7E8AFC9704F04495DF54997291D7B1EA088BA6

Function 00506610 Relevance: 26.4, APIs: 11, Strings: 4, Instructions: 118fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,80000000,00000000,00000000,00000003,00000000,00000000), ref: 0050665D
GetFileSize.KERNEL32(000000FF,00000000), ref: 0050669D
CloseHandle.KERNEL32(000000FF), ref: 005066AE

Part of subcall function 00416740: _DebugHeapAllocator.LIBCPMTD ref: 00416795

Strings

The Resource File is corrupted. Please select another., xrefs: 0050666C
You have selected a file with the size larger than 3Mb., xrefs: 005066B4
The Resource File is corrupted. Please select another., xrefs: 00506718
You have selected an image with the dimension larger than 3000x2000., xrefs: 0050676F

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: File$AllocatorCloseCreateDebugHandleHeapSize
String ID: The Resource File is corrupted. Please select another.$The Resource File is corrupted. Please select another.$You have selected a file with the size larger than 3Mb.$You have selected an image with the dimension larger than 3000x2000.
API String ID: 1278540365-1045440647
Opcode ID: a2995053e53532cd3cc61e84a4e3e243a16d3489957e33b38d496d8e3a878c98
Instruction ID: bf2e516d7632956263a6d0b7edc6ab055445a249ca0629827ad9313cad8a857e
Opcode Fuzzy Hash: a2995053e53532cd3cc61e84a4e3e243a16d3489957e33b38d496d8e3a878c98
Instruction Fuzzy Hash: 3D513C70900259ABDB25EF14DC55BEDBBB0FF45704F1085AAF819AB2D0CB75AE84CB80

Function 00513E80 Relevance: 26.4, APIs: 11, Strings: 4, Instructions: 118fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,80000000,00000000,00000000,00000003,00000000,00000000), ref: 00513ECD
GetFileSize.KERNEL32(000000FF,00000000), ref: 00513F0D
CloseHandle.KERNEL32(000000FF), ref: 00513F1E

Part of subcall function 00416740: _DebugHeapAllocator.LIBCPMTD ref: 00416795

Strings

You have selected an image with the dimension larger than 3000x2000., xrefs: 00513FDF
You have selected a file with the size larger than 3Mb., xrefs: 00513F24
The Resource File is corrupted. Please select another., xrefs: 00513F88
The Resource File is corrupted. Please select another., xrefs: 00513EDC

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: File$AllocatorCloseCreateDebugHandleHeapSize
String ID: The Resource File is corrupted. Please select another.$The Resource File is corrupted. Please select another.$You have selected a file with the size larger than 3Mb.$You have selected an image with the dimension larger than 3000x2000.
API String ID: 1278540365-1045440647
Opcode ID: 31dae65b8d5032fe5dc687f767acb6db0229cd793d994c6b1de10459a5ee8fd9
Instruction ID: 23f2238794eb66d98ba3da9ec40f43027c5041e0f5ff9c1f0f1834951436c019
Opcode Fuzzy Hash: 31dae65b8d5032fe5dc687f767acb6db0229cd793d994c6b1de10459a5ee8fd9
Instruction Fuzzy Hash: 27511970900259AFEB15EF14DC55BEDBB70BB45344F10859AE815AB2D0CB74AF84DF80

Function 00BCC750 Relevance: 24.9, APIs: 2, Strings: 12, Instructions: 406COMMON

Download Yara Rule

APIs

fprintf.MSVCR80 ref: 00BCCADC

Strings

gx=%f, gy=%f, bx=%f, by=%f, xrefs: 00BCCB0F
Ignoring incorrect cHRM value when sRGB is also present, xrefs: 00BCCA97
wx=%f, wy=%f, rx=%f, ry=%f, xrefs: 00BCCAD6
Incorrect cHRM chunk length, xrefs: 00BCC7E2
Missing IHDR before cHRM, xrefs: 00BCC766
Invalid cHRM white point, xrefs: 00BCCC1C
Invalid cHRM after IDAT, xrefs: 00BCC777
Invalid cHRM red point, xrefs: 00BCCBFF
Duplicate cHRM chunk, xrefs: 00BCC7BB
Invalid cHRM green point, xrefs: 00BCCBE2
Missing PLTE before cHRM, xrefs: 00BCC79A
Invalid cHRM blue point, xrefs: 00BCCBC5

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: fprintf
String ID: Duplicate cHRM chunk$Ignoring incorrect cHRM value when sRGB is also present$Incorrect cHRM chunk length$Invalid cHRM after IDAT$Invalid cHRM blue point$Invalid cHRM green point$Invalid cHRM red point$Invalid cHRM white point$Missing IHDR before cHRM$Missing PLTE before cHRM$gx=%f, gy=%f, bx=%f, by=%f$wx=%f, wy=%f, rx=%f, ry=%f
API String ID: 383729395-3711243189
Opcode ID: bcad23804b9371ab46709be48d8d394e21e429e13ce1ca483ef01374a4e6e268
Instruction ID: da96fb429ba4e6dbd6c7228da8d8369e998c091f2d1fd5c04cd21a7d1de3fe6f
Opcode Fuzzy Hash: bcad23804b9371ab46709be48d8d394e21e429e13ce1ca483ef01374a4e6e268
Instruction Fuzzy Hash: 35C128725082089BD310BB68E88BF6EBBE8EF94304F4048DDF58893195DB35D9688797

Function 004E5580 Relevance: 24.9, APIs: 11, Strings: 3, Instructions: 371memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 00438A10: clock.MSVCR80 ref: 00438AA7
Part of subcall function 00438A10: _DebugHeapAllocator.LIBCPMTD ref: 00438AC5

??2@YAPAXI@Z.MSVCR80(000001F8,00000000,?,?,?,?,?,?,?,?,?,4FF694EA), ref: 004E56C0
_DebugHeapAllocator.LIBCPMTD ref: 004E56E8

Part of subcall function 004D7750: _DebugHeapAllocator.LIBCPMTD ref: 004D7791

Part of subcall function 00418CB0: EnterCriticalSection.KERNEL32(xJ,00000001,?,004A78E3,?,004A7688,00000001,4FF694EA,?,?,00000000,005372A8,000000FF,?,004602DC), ref: 00418CBB

Concurrency::cancellation_token_source::~cancellation_token_source.LIBCPMTD ref: 004E5761
Concurrency::cancellation_token_source::~cancellation_token_source.LIBCPMTD ref: 004E57BA
_DebugHeapAllocator.LIBCPMTD ref: 004E57A0

Part of subcall function 00418D00: LeaveCriticalSection.KERNEL32(00000001,00000000,?,00418CE9,00000001,?,00418C7A,00417F19,?,00522EAF,?,005A2ECC,005A2ECC,?,00417F19), ref: 00418D0B

Strings

SetVideoSource completed with bStatus = %d., xrefs: 004E5A61
CVideoLayer::SetVideoSource (%s), xrefs: 004E55B2
Changing source to type=%d, name=%s, xrefs: 004E5615

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$Concurrency::cancellation_token_source::~cancellation_token_sourceCriticalSection$??2@EnterLeaveclock
String ID: CVideoLayer::SetVideoSource (%s)$Changing source to type=%d, name=%s$SetVideoSource completed with bStatus = %d.
API String ID: 940658134-2688229957
Opcode ID: ed1a128956794bde5e5230a4d138cfadb2c5c7bc89fd5ac7b4d3999619687d38
Instruction ID: dba240629de62da63940887bf9cd1e5b9116a74bbdd400ead28e10356bf54a65
Opcode Fuzzy Hash: ed1a128956794bde5e5230a4d138cfadb2c5c7bc89fd5ac7b4d3999619687d38
Instruction Fuzzy Hash: 0EF12B70E00248DFDB04DF95C8A1BEEB7B5AF48308F24816EE4196B392DB796D41CB95

Function 0040C220 Relevance: 24.8, APIs: 9, Strings: 5, Instructions: 308memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 0040FA80: List.LIBCMTD ref: 0040FA8A

_DebugHeapAllocator.LIBCPMTD ref: 0040C2DC

Part of subcall function 004DBD20: Concurrency::details::SchedulerBase::GetPolicy.LIBCMTD ref: 004DBD89

Concurrency::details::SchedulerBase::GetPolicy.LIBCMTD ref: 0040C305

Part of subcall function 004DB530: _DebugHeapAllocator.LIBCPMTD ref: 004DB54A

_DebugHeapAllocator.LIBCPMTD ref: 0040C35E
_DebugHeapAllocator.LIBCPMTD ref: 0040C371

Part of subcall function 004DAFB0: Concurrency::details::ContextBase::GetWorkQueueIdentity.LIBCMTD ref: 004DB014

_snwprintf.MSVCR80 ref: 0040C591
wcslen.MSVCR80 ref: 0040C59E
wcscpy.MSVCR80 ref: 0040C5CE
wcslen.MSVCR80 ref: 0040C5DB

Part of subcall function 0040F760: _invalid_parameter_noinfo.MSVCR80(00000000,?,00409D5D,?,?,00000000,?,?,?,mce,?,?,?,?,?,?), ref: 0040F774

wcscat.MSVCR80 ref: 0040C633

Strings

%s files (%s), xrefs: 0040C583
;*.%s, xrefs: 0040C568
*.%s, xrefs: 0040C426
;*.%s, xrefs: 0040C488
*.%s, xrefs: 0040C506

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$Base::Concurrency::details::$PolicySchedulerwcslen$ContextIdentityListQueueWork_invalid_parameter_noinfo_snwprintfwcscatwcscpy
String ID: %s files (%s)$*.%s$*.%s$;*.%s$;*.%s
API String ID: 3673500439-2222090975
Opcode ID: 410b57a6a7f9a888242e909b12c55668fef034fc55ece74735e624549ad644eb
Instruction ID: 0f1205feb10db953e557daecc0f66cfc6334ceda2ae244769a0a321528e6ad92
Opcode Fuzzy Hash: 410b57a6a7f9a888242e909b12c55668fef034fc55ece74735e624549ad644eb
Instruction Fuzzy Hash: 7BC12F71D00208DBDB14EBA5E892BEEB775AF54308F10417EF116B72D1DB385A48CB99

Function 0041A3B0 Relevance: 24.8, APIs: 6, Strings: 8, Instructions: 308memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 004CB670: _DebugHeapAllocator.LIBCPMTD ref: 004CB6AA
Part of subcall function 004CB670: _DebugHeapAllocator.LIBCPMTD ref: 004CB711
Part of subcall function 004CB670: _DebugHeapAllocator.LIBCPMTD ref: 004CB76F
Part of subcall function 004CB670: _DebugHeapAllocator.LIBCPMTD ref: 004CB787

_DebugHeapAllocator.LIBCPMTD ref: 0041A415

Part of subcall function 0040EA00: _DebugHeapAllocator.LIBCPMTD ref: 0040EA0E

Part of subcall function 0040EE30: _DebugHeapAllocator.LIBCPMTD ref: 0040EE68
Part of subcall function 0040EE30: _DebugHeapAllocator.LIBCPMTD ref: 0040EEAA

_DebugHeapAllocator.LIBCPMTD ref: 0041A437
_DebugHeapAllocator.LIBCPMTD ref: 0041A455
_DebugHeapAllocator.LIBCPMTD ref: 0041A47D

Part of subcall function 00472C60: _wfopen_s.MSVCR80 ref: 00472CBE
Part of subcall function 00472C60: fclose.MSVCR80 ref: 00472CDF

Part of subcall function 00416740: _DebugHeapAllocator.LIBCPMTD ref: 00416795

Part of subcall function 004730D0: _DebugHeapAllocator.LIBCPMTD ref: 0047314B
Part of subcall function 004730D0: _DebugHeapAllocator.LIBCPMTD ref: 0047316D

?Load@CxImage@@QAE_NPB_WK@Z.CXIMAGECRT(00000000,00000000,?,00000000,?,0053E990,?,?,?,?,?,\class.xml,?,?,?,data\images\), ref: 0041A530

Strings

icon_and_text, xrefs: 0041A696
icon, xrefs: 0041A674
P, xrefs: 0041A4A6
8S, xrefs: 0041A6B6
style, xrefs: 0041A64A
data\images\, xrefs: 0041A40D
S, xrefs: 0041A6C4
\class.xml, xrefs: 0041A42F

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$Image@@Load@_wfopen_sfclose
String ID: 8S$P$\class.xml$data\images\$icon$icon_and_text$style$S
API String ID: 255584289-693003568
Opcode ID: 603b225bfe0989b9d3390ef585aae42c8b49bc1da2bbc25a9b3d303a95ec7668
Instruction ID: 810976337b1479ad00da3f975604671f65968c870661c51cbc195e462080606e
Opcode Fuzzy Hash: 603b225bfe0989b9d3390ef585aae42c8b49bc1da2bbc25a9b3d303a95ec7668
Instruction Fuzzy Hash: 4BD16EB0D012189BDB14DB95CD92BEDBBB4BF18304F10819EE14A77281DB746E85CF9A

Function 00401690 Relevance: 24.7, APIs: 10, Strings: 4, Instructions: 176COMMON

Download Yara Rule

APIs

cvCvtColor.CV099(?,?,00000007), ref: 004016FA
cvGetImageROI.CXCORE099(?,?), ref: 0040170E
cvSobel.CV099(?,?,00000001,00000000,00000003,?,?), ref: 00401742
cvSobel.CV099(?,?,00000000,00000001,00000003), ref: 00401758
cvGEMM.CXCORE099(?,?,?,00000000,?,00000000), ref: 004017D9
cvCopy.CXCORE099(?,?,00000000), ref: 004017F1
cvError.CXCORE099(000000FB,cvCylTrackModel,Invalid input frame.,.\src\cyltracker.cpp,000001A0), ref: 00401886
cvSetImageROI.CXCORE099(?), ref: 004018B5

Strings

.\src\cyltracker.cpp, xrefs: 004016B8, 00401875
Invalid input frame., xrefs: 0040187A
cvCylTrackModel, xrefs: 0040187F
Null pointer to the tracker context., xrefs: 004016BD

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: ImageSobel$ColorCopyError
String ID: .\src\cyltracker.cpp$Invalid input frame.$Null pointer to the tracker context.$cvCylTrackModel
API String ID: 3140367126-428952811
Opcode ID: 3ec082688a0413c58711cd9b83bdb17f3b228cbd943129101cc4b4c10cf63d8e
Instruction ID: 66ebd014f4a14a4e4a4a45a8ae43f3bc62eaeaf842471fa18c085293a8b48d64
Opcode Fuzzy Hash: 3ec082688a0413c58711cd9b83bdb17f3b228cbd943129101cc4b4c10cf63d8e
Instruction Fuzzy Hash: 5051A1B1B00601ABC608EB64DC86FA6F7A5BF89710F008229FA58573D1D774E924CBD6

Function 00BA6350 Relevance: 24.3, APIs: 16, Instructions: 305COMMON

Download Yara Rule

APIs

Part of subcall function 00BA4A80: GetWindowLongA.USER32(?,000000EB), ref: 00BA4A83

DefWindowProcA.USER32(?,?,?), ref: 00BA6394
SetCapture.USER32 ref: 00BA65F8
ReleaseCapture.USER32 ref: 00BA6616
GetClientRect.USER32(?,?), ref: 00BA662E
DefWindowProcA.USER32(?,?,?), ref: 00BA66B4

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Window$CaptureProc$ClientLongRectRelease
String ID:
API String ID: 81580808-0
Opcode ID: 1448a0364524ada48fc172e30ee6c3fcbf854dc5d3df8d9b26b0a110768a0efa
Instruction ID: fb7a3d5c8b9e2e8ecfe202c1fa540b495c31f8c734b7f988f40f1c8311593d8b
Opcode Fuzzy Hash: 1448a0364524ada48fc172e30ee6c3fcbf854dc5d3df8d9b26b0a110768a0efa
Instruction Fuzzy Hash: 09B1CFB160C3429FD724CF28C888BAFBBE5EBC9304F18496DF94597241CB75E9458B92

Function 00BEBEA0 Relevance: 24.1, APIs: 16, Instructions: 141sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000003E8,?,?,00000001,?,00BEC0CA,00000001,?,?,00BF3960,00000010,00BEC196,?), ref: 00BEBEFD
InterlockedCompareExchange.KERNEL32(00BFD220,?,00000000), ref: 00BEBF06
_amsg_exit.MSVCR80 ref: 00BEBF24
_initterm_e.MSVCR80 ref: 00BEBF3F
_initterm.MSVCR80 ref: 00BEBF5B
InterlockedExchange.KERNEL32(00BFD220,00000000), ref: 00BEBF70
Sleep.KERNEL32(000003E8,?,?,00000001,?,00BEC0CA,00000001,?,?,00BF3960,00000010,00BEC196,?), ref: 00BEBFC1
InterlockedCompareExchange.KERNEL32(00BFD220,00000001,00000000), ref: 00BEBFCB
_amsg_exit.MSVCR80 ref: 00BEBFDD
_decode_pointer.MSVCR80(?,?,00000001,?,00BEC0CA,00000001,?,?,00BF3960,00000010,00BEC196,?), ref: 00BEBFF1
_decode_pointer.MSVCR80(?,00000001,?,00BEC0CA,00000001,?,?,00BF3960,00000010,00BEC196,?), ref: 00BEC000
_encoded_null.MSVCR80(00000001,?,00BEC0CA,00000001,?,?,00BF3960,00000010,00BEC196,?), ref: 00BEC012
_decode_pointer.MSVCR80(?,?,00BEC0CA,00000001,?,?,00BF3960,00000010,00BEC196,?), ref: 00BEC022
free.MSVCR80 ref: 00BEC02F
_encoded_null.MSVCR80(?,00BF3960,00000010,00BEC196,?), ref: 00BEC036
InterlockedExchange.KERNEL32(00BFD220,00000000), ref: 00BEC053

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: ExchangeInterlocked$_decode_pointer$CompareSleep_amsg_exit_encoded_null$_initterm_initterm_efree
String ID:
API String ID: 2174737765-0
Opcode ID: 373523d0d300a98840902ba2e439da3266bf66e610fa0f9a934fcdc025380e7e
Instruction ID: 85834b6af78a732f5c6c37edc74fb50f555f400d8ac625dea210623c4ae873db
Opcode Fuzzy Hash: 373523d0d300a98840902ba2e439da3266bf66e610fa0f9a934fcdc025380e7e
Instruction Fuzzy Hash: 5441AC31504385DFD620AF6AED85A3ABBE5EB48311F2004AAF502D71A2CFB1D842DFD1

Function 004B8420 Relevance: 23.0, APIs: 4, Strings: 9, Instructions: 284memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 00438A10: clock.MSVCR80 ref: 00438AA7
Part of subcall function 00438A10: _DebugHeapAllocator.LIBCPMTD ref: 00438AC5

_DebugHeapAllocator.LIBCPMTD ref: 004B84DB
??2@YAPAXI@Z.MSVCR80(00000030,?,?,?,?,?,?,?,4FF694EA), ref: 004B84E2

Part of subcall function 004B77A0: fwprintf.MSVCR80 ref: 004B7842
Part of subcall function 004B77A0: fflush.MSVCR80 ref: 004B7852

Part of subcall function 00438AF0: clock.MSVCR80 ref: 00438B1F

Strings

Couldn't find the graph %s!, xrefs: 004B86E7
Creating frame grabbing graph for file %s, xrefs: 004B856B
Destroying the graph., xrefs: 004B8725
Failed creating graph with hr=%X; preparing to clean up., xrefs: 004B8697
CManyCamGraphMgr::CreateGraph, xrefs: 004B8448
Setting current pos for the graph %s, xrefs: 004B8616
AppModel pointer is NULL! Returning E_FAIL., xrefs: 004B8472
Setting graph state %d, xrefs: 004B8655
Creating frame grabbing graph for camera %s, xrefs: 004B84C0

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeapclock$??2@fflushfwprintf
String ID: AppModel pointer is NULL! Returning E_FAIL.$CManyCamGraphMgr::CreateGraph$Couldn't find the graph %s!$Creating frame grabbing graph for camera %s$Creating frame grabbing graph for file %s$Destroying the graph.$Failed creating graph with hr=%X; preparing to clean up.$Setting current pos for the graph %s$Setting graph state %d
API String ID: 1778695617-1153812090
Opcode ID: f1e7f66eff02cda7a9ed3db3bcb49d45f39b49662cdf193da7ba6901c3f1654f
Instruction ID: f3cb85e83180b36cfd0b303413b5ba2857901d6173e86f69feec068597868732
Opcode Fuzzy Hash: f1e7f66eff02cda7a9ed3db3bcb49d45f39b49662cdf193da7ba6901c3f1654f
Instruction Fuzzy Hash: FBC11B75D00209AFDB04DF99CC92BEEB7B4AF48308F14411EF5167B292DB786A05CB69

Function 005062D0 Relevance: 23.0, APIs: 9, Strings: 4, Instructions: 206memoryCOMMON

Download Yara Rule

APIs

_DebugHeapAllocator.LIBCPMTD ref: 00506312
_DebugHeapAllocator.LIBCPMTD ref: 00506336
_DebugHeapAllocator.LIBCPMTD ref: 00506352
_DebugHeapAllocator.LIBCPMTD ref: 0050636E

Part of subcall function 004CB0F0: _DebugHeapAllocator.LIBCPMTD ref: 004CB139
Part of subcall function 004CB0F0: _DebugHeapAllocator.LIBCPMTD ref: 004CB155
Part of subcall function 004CB0F0: _DebugHeapAllocator.LIBCPMTD ref: 004CB171
Part of subcall function 004CB0F0: _DebugHeapAllocator.LIBCPMTD ref: 004CB1A3
Part of subcall function 004CB0F0: _DebugHeapAllocator.LIBCPMTD ref: 004CB1D6

??0CxImage@@QAE@K@Z.CXIMAGECRT(00000000,000000FF,?,?,?,?,?,?,?,?,?,00000000,?,00000002,4FF694EA), ref: 005063A1
??0CxImage@@QAE@K@Z.CXIMAGECRT(00000000,00000000,000000FF,?,?,?,?,?,?,?,?,?,00000000,?,00000002,4FF694EA), ref: 005063B5

Part of subcall function 00416740: _DebugHeapAllocator.LIBCPMTD ref: 00416795

Part of subcall function 0050E4A0: _DebugHeapAllocator.LIBCPMTD ref: 0050E4E3
Part of subcall function 0050E4A0: _DebugHeapAllocator.LIBCPMTD ref: 0050E4FF

memcpy.MSVCR80(?,?,?,4FF694EA), ref: 0050646C
??3@YAXPAX@Z.MSVCR80(?,?,anonymous_type,?,?,mask_reader_ver,?,?,mask_type,?,?,?,?,4FF694EA), ref: 0050652C
??3@YAXPAX@Z.MSVCR80(?,?,?,?,?,4FF694EA), ref: 0050653E

Strings

properties, xrefs: 005063F3
mask_reader_ver, xrefs: 005064BA
mask_type, xrefs: 00506483
anonymous_type, xrefs: 005064F1

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$??3@Image@@$memcpy
String ID: anonymous_type$mask_reader_ver$mask_type$properties
API String ID: 3418783136-1683271502
Opcode ID: ea6c7d0e71fb220edab34224d6aa0e07e57cb9ccd2759369dc2a5b15c5864e21
Instruction ID: 830ff7d4bb77275050dcf287e18c53aa9cee5c96830a24d37f20f8f55580aab9
Opcode Fuzzy Hash: ea6c7d0e71fb220edab34224d6aa0e07e57cb9ccd2759369dc2a5b15c5864e21
Instruction Fuzzy Hash: 8891F7B1E002489FDB04DFA8D896BEEBBB5BF88304F10816DE419A7381DB345A45CF91

Function 00BA4C20 Relevance: 22.9, APIs: 11, Strings: 2, Instructions: 192registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.ADVAPI32(80000001,?,00000000,00020019,?), ref: 00BA4CA7
RegCreateKeyExA.ADVAPI32(80000001,?,00000000,00000000,00000000,0004001F,00000000,?,00000000), ref: 00BA4D0E
RegEnumKeyExA.ADVAPI32(?,?,?,?,?,?,00000000,?,?,00000000,00000000,00000000,?), ref: 00BA4D4B

Strings

Top, xrefs: 00BA4E35
Left, xrefs: 00BA4E1C

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: CreateEnumOpen
String ID: Left$Top
API String ID: 1535768306-3873733008
Opcode ID: 4a9befcaaf5122fc4af022c0fe77aed01f7f2bdf9a584055edb868c25e278978
Instruction ID: 103cc90e1098b65a18c5c1e4420051ca2d2c59d218c73c6f8a35a8d32610864c
Opcode Fuzzy Hash: 4a9befcaaf5122fc4af022c0fe77aed01f7f2bdf9a584055edb868c25e278978
Instruction Fuzzy Hash: 7551B2B2108285AFD720DB64DC90EBBB7EDEBC9304F044D6DF68587141E7B1AD0887A2

Function 00514480 Relevance: 22.9, APIs: 9, Strings: 4, Instructions: 157memoryCOMMON

Download Yara Rule

APIs

?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(4FF694EA,000000FF,?,005125AA,?,?,?,00000000,?,?,?,?,?,00569F04,preview.jpg,00000000), ref: 005144AB
?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT(4FF694EA,000000FF,?,005125AA,?,?,?,00000000,?,?,?,?,?,00569F04,preview.jpg,00000000), ref: 005144B6
?Resample@CxImage@@QAE_NJJHPAV1@@Z.CXIMAGECRT(00000160,00000000,00000001,00000000,?,?,?,00000160,00000120,00000001,4FF694EA,000000FF,?,005125AA,?,?), ref: 00514559
?IncreaseBpp@CxImage@@QAE_NK@Z.CXIMAGECRT(00000018,00000160,00000000,00000001,00000000,?,?,?,00000160,00000120,00000001,4FF694EA,000000FF,?,005125AA,?), ref: 00514563
?AlphaCreate@CxImage@@QAE_NXZ.CXIMAGECRT(00000018,00000160,00000000,00000001,00000000,?,?,?,00000160,00000120,00000001,4FF694EA,000000FF,?,005125AA,?), ref: 0051456B
?Save@CxImage@@QAE_NPB_WK@Z.CXIMAGECRT(00000000,00000004,00000160,00000120,00000001,4FF694EA,000000FF,?,005125AA,?,?,?,00000000,?,?,?), ref: 005145B1
_DebugHeapAllocator.LIBCPMTD ref: 005145DC
?Resample@CxImage@@QAE_NJJHPAV1@@Z.CXIMAGECRT(?,00569E8C,00000001,00000000,00000000,0056A220,00000000,00000004,00000160,00000120,00000001,4FF694EA,000000FF,?,005125AA,?), ref: 0051463E
?Save@CxImage@@QAE_NPB_WK@Z.CXIMAGECRT(00000000,00000004,?,00569E8C,00000001,00000000,00000000,0056A220,00000000,00000004,00000160,00000120,00000001,4FF694EA,000000FF), ref: 00514651

Strings

%s\%d.png, xrefs: 005145F6
352x288, xrefs: 0051458D
%s\%d.png, xrefs: 00514592
640x480, xrefs: 005145F1

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Image@@$Resample@Save@V1@@$AllocatorAlphaBpp@Create@DebugHeapHeight@IncreaseWidth@
String ID: %s\%d.png$%s\%d.png$352x288$640x480
API String ID: 2860891125-2440275166
Opcode ID: a43d91bb6eb54d53ff6a1737a5b0fe56c092a8fccabc49aed94ca0378de78455
Instruction ID: acc42daae56a842fc35e0990e2763de5810e809cf3d34599ed660b5ee8a323ea
Opcode Fuzzy Hash: a43d91bb6eb54d53ff6a1737a5b0fe56c092a8fccabc49aed94ca0378de78455
Instruction Fuzzy Hash: 5A6107B5E00209AFDB04EF99D892AEEBBB5FF88300F108529F515B7291DB746941CF94

Function 00BACA70 Relevance: 21.4, APIs: 10, Strings: 2, Instructions: 371COMMON

Download Yara Rule

APIs

??2@YAPAXI@Z.MSVCR80(00000000), ref: 00BACAF6
??2@YAPAXI@Z.MSVCR80(00000000,00000000), ref: 00BACB12
??2@YAPAXI@Z.MSVCR80(?,00000000,00000000), ref: 00BACB1F

Strings

II*, xrefs: 00BACB29
r+b, xrefs: 00BACE61

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: ??2@
String ID: II*$r+b
API String ID: 1033339047-1110506143
Opcode ID: 5073ca994d744b6d558123f4c8d6be6d5919bdd4ad8186201733db24c9a69ea3
Instruction ID: 463420041c2d7f46f3daf1d39902e3084b16c3c24f73c733109b9c674dcc3a6e
Opcode Fuzzy Hash: 5073ca994d744b6d558123f4c8d6be6d5919bdd4ad8186201733db24c9a69ea3
Instruction Fuzzy Hash: 48C16F7034C340ABD614DF28C892B2FBBE5EBCA700F10485DF6869B391DBB5D9458B96

Function 00472C60 Relevance: 21.3, APIs: 7, Strings: 5, Instructions: 270memoryCOMMON

Download Yara Rule

APIs

_wfopen_s.MSVCR80 ref: 00472CBE
fclose.MSVCR80 ref: 00472CDF
_DebugHeapAllocator.LIBCPMTD ref: 00472D41
_DebugHeapAllocator.LIBCPMTD ref: 00472D53
_DebugHeapAllocator.LIBCPMTD ref: 00472E2E
_DebugHeapAllocator.LIBCPMTD ref: 00472E59
_DebugHeapAllocator.LIBCPMTD ref: 00472E98

Strings

name, xrefs: 00472F2B
base_class, xrefs: 00472DD6
class, xrefs: 00472D67
prop, xrefs: 00472F05
val, xrefs: 00472F52

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$_wfopen_sfclose
String ID: base_class$class$name$prop$val
API String ID: 1905607448-2961531382
Opcode ID: 265c9ab7eb5baf22480eda760dc822cfc626c5c0d99404b903e2b5ff3dc1b93f
Instruction ID: 751db2e67e60f486d96aaf90422ccf13f7de2e4e99e3856fc400571b524def08
Opcode Fuzzy Hash: 265c9ab7eb5baf22480eda760dc822cfc626c5c0d99404b903e2b5ff3dc1b93f
Instruction Fuzzy Hash: 47C14C70901258DEDB14EBA4CD55BEEBBB4BF50308F10819EE14A67292DB781F88CF95

Function 00BC0E70 Relevance: 21.2, APIs: 4, Strings: 8, Instructions: 178COMMON

Download Yara Rule

APIs

_setjmp3.MSVCR80 ref: 00BC0EB5

Strings

Unknown zlib error, xrefs: 00BC1028
Application is running with png.c from libpng-%.20s, xrefs: 00BC0F9C
Incompatible libpng version in application and library, xrefs: 00BC0FAE
zlib version error, xrefs: 00BC1021
1.2.2, xrefs: 00BC0FED
Application was compiled with png.h from libpng-%.20s, xrefs: 00BC0F7F
zlib memory error, xrefs: 00BC101A
1.2.8, xrefs: 00BC0F1F, 00BC0F4C, 00BC0F94

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: _setjmp3
String ID: 1.2.2$1.2.8$Application is running with png.c from libpng-%.20s$Application was compiled with png.h from libpng-%.20s$Incompatible libpng version in application and library$Unknown zlib error$zlib memory error$zlib version error
API String ID: 3837033383-2455210892
Opcode ID: f176568b45a682ed9881bca409da636e58af4412691c2d00e578b671341a1987
Instruction ID: 087c0c9fc9768de317e5c285eacf288d97990f2c66933c06134d048eb3a72df7
Opcode Fuzzy Hash: f176568b45a682ed9881bca409da636e58af4412691c2d00e578b671341a1987
Instruction Fuzzy Hash: 5451D371A54348ABD720EF689842FBF77E9EF45300F0445DDF98997202D770A945CBA1

Function 0042E150 Relevance: 21.2, APIs: 7, Strings: 5, Instructions: 171memoryCOMMON

Download Yara Rule

APIs

_DebugHeapAllocator.LIBCPMTD ref: 0042E198

Part of subcall function 004167C0: _DebugHeapAllocator.LIBCPMTD ref: 004167CE

_DebugHeapAllocator.LIBCPMTD ref: 0042E1D1

Part of subcall function 004167E0: _DebugHeapAllocator.LIBCPMTD ref: 004167EE

_DebugHeapAllocator.LIBCPMTD ref: 0042E203

Part of subcall function 0040EA00: _DebugHeapAllocator.LIBCPMTD ref: 0040EA0E

_DebugHeapAllocator.LIBCPMTD ref: 0042E23C
_DebugHeapAllocator.LIBCPMTD ref: 0042E258
GetDateFormatW.KERNEL32(00000400,00000000,?,00000000,?,00000400), ref: 0042E295
_DebugHeapAllocator.LIBCPMTD ref: 0042E2A5

Strings

Creation date: , xrefs: 0042E250
Name: , xrefs: 0042E190
www.manycam.com, xrefs: 0042E346
Created by: , xrefs: 0042E1FB
www.manycam.com, xrefs: 0042E35A

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$DateFormat
String ID: Created by: $Creation date: $Name: $www.manycam.com$www.manycam.com
API String ID: 393568584-1701023392
Opcode ID: 6ae18c8123b619394136c12ce8f0d690e019f5e653af45ce7849ef6131bd0f08
Instruction ID: cbadc1f5ef3ad51f7f35ce95d366eb704496e5c2bb1529dbc726db86d70e8f02
Opcode Fuzzy Hash: 6ae18c8123b619394136c12ce8f0d690e019f5e653af45ce7849ef6131bd0f08
Instruction Fuzzy Hash: 65711771A001199FCB14EB64CD91BEEB7B4BF48304F10869DE55AA7291DF34AE88CF94

Function 00406670 Relevance: 21.2, APIs: 11, Strings: 1, Instructions: 164COMMON

Download Yara Rule

APIs

Part of subcall function 00406840: GetWindowLongW.USER32(?,000000F0), ref: 0040684F

GetParent.USER32 ref: 0040669A
GetWindow.USER32(?,00000004), ref: 004066AD
GetWindowRect.USER32(?,?), ref: 004066C0
GetWindowLongW.USER32(00000000,000000F0), ref: 004066DD
SystemParametersInfoW.USER32(00000030,00000000,?,00000000), ref: 0040670D
GetWindowRect.USER32(00000000,?), ref: 0040673B
GetParent.USER32(?), ref: 00406749
GetClientRect.USER32(?,?), ref: 0040675A
GetClientRect.USER32(00000000,?), ref: 00406768
MapWindowPoints.USER32(00000000,?,?,00000002), ref: 0040677C
SetWindowPos.USER32(4FF694EA,00000000,00000000,4FF694EA,000000FF,000000FF,00000015,?,?), ref: 00406826

Strings

*b@, xrefs: 004067BB, 004067FF, 0040680A

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Window$Rect$ClientLongParent$InfoParametersPointsSystem
String ID: *b@
API String ID: 2289592163-3951841937
Opcode ID: 85e0b70c33394ba71c68aafcb1af9cf7bac2a856a7ed6dfd4d8bfa7c3afbd8a7
Instruction ID: 1e1c0fd00856f1237eb481f10da8126670bc63b2ce16d521bf68457a350c038b
Opcode Fuzzy Hash: 85e0b70c33394ba71c68aafcb1af9cf7bac2a856a7ed6dfd4d8bfa7c3afbd8a7
Instruction Fuzzy Hash: BA611975E00209EFDB04CFE8C984AEEBBB5BF88304F148629E516BB394D734A945CB54

Function 00499CC0 Relevance: 21.2, APIs: 9, Strings: 3, Instructions: 164windowCOMMON

Download Yara Rule

APIs

GetActiveWindow.USER32 ref: 00499D15
GetLastActivePopup.USER32(00000000), ref: 00499D31
SendMessageW.USER32(00000000,0000000D,00000104,?), ref: 00499D71
GetModuleFileNameW.KERNEL32(00000000,?,00000104), ref: 00499DEB
GetFullPathNameW.KERNEL32(?,00000104,?,?), ref: 00499E0B
wcscat.MSVCR80 ref: 00499E61
GetPrivateProfileStringW.KERNEL32(DoNotAsk,00000000,00557E44,?,00000010,?), ref: 00499E9A
wcstoul.MSVCR80 ref: 00499EAF
MessageBeep.USER32(?), ref: 00499F1C

Strings

DoNotAsk, xrefs: 00499E95
PPMessageBox.ini, xrefs: 00499E55
%s%d, xrefs: 00499E31

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: ActiveMessageName$BeepFileFullLastModulePathPopupPrivateProfileSendStringWindowwcscatwcstoul
String ID: %s%d$DoNotAsk$PPMessageBox.ini
API String ID: 3999366269-2647165371
Opcode ID: 88fe661ea0f20f6091777b59d426feaaedbdce2cd2330f005451ca6092a7d098
Instruction ID: 52c43eb377399d7600db362d3f6ba6012730098c3eeec84a0b2b3f1ac4b66590
Opcode Fuzzy Hash: 88fe661ea0f20f6091777b59d426feaaedbdce2cd2330f005451ca6092a7d098
Instruction Fuzzy Hash: D571697190022A9BEF34DB54CD85BEAB7B8FB48305F0005EAE509A76D0DB742E84DF54

Function 0041C950 Relevance: 19.7, APIs: 13, Instructions: 185COMMON

Download Yara Rule

APIs

Part of subcall function 004078E0: GetClientRect.USER32(?,00000000), ref: 004078F1

GetStockObject.GDI32(00000000), ref: 0041C9C4
FillRect.USER32(?,?,00000000), ref: 0041C9D3
?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT ref: 0041C9FF
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT ref: 0041CA2E
?Draw@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@_N@Z.CXIMAGECRT(00000000,?,00000000,00000000), ref: 0041CA56
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(00000000,?,00000000,00000000), ref: 0041CA6D
?Draw@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@_N@Z.CXIMAGECRT(00000000,?,00000000,00000000,00000000,?,00000000,00000000), ref: 0041CA97
?Draw@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@_N@Z.CXIMAGECRT(00000000,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,00000000,00000000), ref: 0041CAC5
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(00000000,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,00000000,00000000), ref: 0041CB0E
?Draw@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@_N@Z.CXIMAGECRT(00000000,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,00000000,00000000), ref: 0041CB36
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(00000000,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,00000000,00000000), ref: 0041CB4D
?Draw@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@_N@Z.CXIMAGECRT(00000000,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,00000000,00000000), ref: 0041CB77
?Draw@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@_N@Z.CXIMAGECRT(00000000,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,00000000,00000000), ref: 0041CBA5

Part of subcall function 00412790: BitBlt.GDI32(FFFFFFFF,?,?,?,?,?,?,?,00CC0020), ref: 00412805

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Image@@$C__@@Draw@U3@_Utag$Width@$Rect$ClientFillHeight@ObjectStock
String ID:
API String ID: 1214153398-0
Opcode ID: 1d1617abfc9fbb8697bfd5c8fbec6c435857e0e2642eb5cd6e205186f3222b68
Instruction ID: 64adb8edbe6d6a745132db4a95317a47dd4f78eb1bf019a77eab89ed2a27929a
Opcode Fuzzy Hash: 1d1617abfc9fbb8697bfd5c8fbec6c435857e0e2642eb5cd6e205186f3222b68
Instruction Fuzzy Hash: 8A81C3B4D002099FDB58EF98D991BEEB7B5BF48304F20816AE519B7381DB342A45CF64

Function 00502A40 Relevance: 19.7, APIs: 13, Instructions: 160COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 898b4d837ae699b25311b23fbbf044c2f725344d7131efd26da484f397ae12a6
Instruction ID: 12e37dd4abdcf4f70f14d239c3f2fb0002299592faa212dd5bf358f334e534ec
Opcode Fuzzy Hash: 898b4d837ae699b25311b23fbbf044c2f725344d7131efd26da484f397ae12a6
Instruction Fuzzy Hash: 20615470904308EFDB14DFA4D85AAEEBFB6BF55310F204A19E516AB2D1EB305A48DB50

Function 00434E60 Relevance: 19.5, APIs: 6, Strings: 5, Instructions: 254COMMON

Download Yara Rule

Strings

Drawing over video, xrefs: 00434F75
Text over video, xrefs: 00434F36
Date & Time, xrefs: 00434EF4
#NC, xrefs: 00434EB0, 00435002, 00435192, 004351A6, 00434FD1, 00434EB3, 00434FD4, 00435005, 00435195, 004351A9
Backgrounds, xrefs: 00435130

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID:
String ID: #NC$Backgrounds$Date & Time$Drawing over video$Text over video
API String ID: 0-745308588
Opcode ID: e89cde5ceba465d579d9307fe3d900b605cbcdb901679e140c7094b8ba2244ab
Instruction ID: 61b0055fb2e5cbe1d4e4773f87cdc9b928e12edc189f893c90bd2281fadebac5
Opcode Fuzzy Hash: e89cde5ceba465d579d9307fe3d900b605cbcdb901679e140c7094b8ba2244ab
Instruction Fuzzy Hash: D4B14271D052189FCF08EFE5D851BEEBBB5BF48308F14452EE10A6B282DB385945CB99

Function 00499F90 Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 250windowCOMMON

Download Yara Rule

APIs

Part of subcall function 00488640: ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ.MSVCP80(?,?,0049A02E,4FF694EA,?,?), ref: 0048864A

Part of subcall function 00479BB0: GetSysColor.USER32(00000010), ref: 00479DFB

GetModuleHandleW.KERNEL32(00000000,4FF694EA,?,?), ref: 0049A14F
GetModuleHandleW.KERNEL32(00000000,4FF694EA,?,?), ref: 0049A16C
memset.MSVCR80 ref: 0049A286
SystemParametersInfoW.USER32(00000029,00000000,000001F8,00000000), ref: 0049A2A5
CreateFontIndirectW.GDI32(?), ref: 0049A2AF
LoadIconW.USER32(00000000,00007F01), ref: 0049A31D

Strings

p, xrefs: 0049A2F5

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: HandleModule$??0?$basic_string@_ColorCreateFontIconIndirectInfoLoadParametersSystemU?$char_traits@_V?$allocator@_W@2@@std@@W@std@@memset
String ID: p
API String ID: 89581510-2181537457
Opcode ID: a881004d8c46297404a52378e96728856b1f8b23cb2602775ab0371babacd52b
Instruction ID: 0b2ca985f61fbf1d9d73a94fc23b706029f1d57e4e767938025d9d6251a87b1b
Opcode Fuzzy Hash: a881004d8c46297404a52378e96728856b1f8b23cb2602775ab0371babacd52b
Instruction Fuzzy Hash: 46C13230901158EFDB24DFA4D859BADB7B1AF48304F2481DED50A6B382CB795E84CF55

Function 0050F480 Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

_mAnnnYca@aM_, xrefs: 0050F6D0

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID:
String ID: _mAnnnYca@aM_
API String ID: 0-3995523097
Opcode ID: d785f2585446dacc2ea26e3cd8fc161da3962a7f22c1aaa8b953898c058bd1e2
Instruction ID: 03f3f580957dd8d98fe766c3b08c4ea85ac32c8ace33bb22cf726ef2f4b4dfae
Opcode Fuzzy Hash: d785f2585446dacc2ea26e3cd8fc161da3962a7f22c1aaa8b953898c058bd1e2
Instruction Fuzzy Hash: 51A12CB1A4021A9FDB24DF54DC95FEEB775BF88304F1082E8E50967281DB31AA80CF91

Function 0050F080 Relevance: 19.4, APIs: 7, Strings: 4, Instructions: 129fileCOMMON

Download Yara Rule

APIs

Part of subcall function 00438A10: clock.MSVCR80 ref: 00438AA7
Part of subcall function 00438A10: _DebugHeapAllocator.LIBCPMTD ref: 00438AC5

SetFileAttributesW.KERNEL32(00000000,00000080,?,?,4FF694EA), ref: 0050F10D
CreateFileW.KERNEL32(00000000,001F01FF,00000000,00000000,00000003,00000000,00000000,?,?,4FF694EA), ref: 0050F134

Part of subcall function 00438AF0: clock.MSVCR80 ref: 00438B1F

Strings

_mAnnnYca@aM_, xrefs: 0050F18D
Couldn't open a file to flush MCE data to disk: %s, xrefs: 0050F156
CMCEData::FlushToDisk(), xrefs: 0050F0B1
h-Z, xrefs: 0050F16C

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Fileclock$AllocatorAttributesCreateDebugHeap
String ID: CMCEData::FlushToDisk()$Couldn't open a file to flush MCE data to disk: %s$_mAnnnYca@aM_$h-Z
API String ID: 3526691834-3819927071
Opcode ID: c250c6d348c6a577bac95d433ffd8b1c35fd8412c96bf1b7ac210eb878312dd3
Instruction ID: 3fd365fe576ff881e40a2fa1f18d14bb5eaede2e8814e90bc3ea97a76a5821e3
Opcode Fuzzy Hash: c250c6d348c6a577bac95d433ffd8b1c35fd8412c96bf1b7ac210eb878312dd3
Instruction Fuzzy Hash: 62517C70E44318ABEB24DB64DC46BEAB774FB94700F0082ADE619672C1DF792A84CF54

Function 0041D3A0 Relevance: 18.2, APIs: 12, Instructions: 178COMMON

Download Yara Rule

APIs

Part of subcall function 004078E0: GetClientRect.USER32(?,00000000), ref: 004078F1

?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT(?,4FF694EA,4FF694EA,4FF694EA), ref: 0041D427
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(?,4FF694EA,4FF694EA,4FF694EA), ref: 0041D453
?Draw@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@_N@Z.CXIMAGECRT(00000000,?,00000000,00000000,?,4FF694EA,4FF694EA,4FF694EA), ref: 0041D478
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(00000000,?,00000000,00000000,?,4FF694EA,4FF694EA,4FF694EA), ref: 0041D48C
?Draw@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@_N@Z.CXIMAGECRT(00000000,?,00000000,00000000,00000000,?,00000000,00000000,?,4FF694EA,4FF694EA,4FF694EA), ref: 0041D4B3
?Draw@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@_N@Z.CXIMAGECRT(00000000,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,00000000,00000000,?,4FF694EA,4FF694EA,4FF694EA), ref: 0041D4DE
?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT(00000000,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,00000000,00000000,?,4FF694EA,4FF694EA,4FF694EA), ref: 0041D506
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(00000000,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,00000000,00000000,?,4FF694EA,4FF694EA,4FF694EA), ref: 0041D532
?Draw@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@_N@Z.CXIMAGECRT(00000000,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,00000000,00000000), ref: 0041D557
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(00000000,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,00000000,00000000), ref: 0041D56B
?Draw@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@_N@Z.CXIMAGECRT(00000000,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,00000000,00000000), ref: 0041D592
?Draw@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@_N@Z.CXIMAGECRT(00000000,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,00000000,00000000), ref: 0041D5BD

Part of subcall function 00412790: BitBlt.GDI32(FFFFFFFF,?,?,?,?,?,?,?,00CC0020), ref: 00412805

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Image@@$C__@@Draw@U3@_Utag$Width@$Height@$ClientRect
String ID:
API String ID: 800822957-0
Opcode ID: 48e4cdac09fd2584f099d7bad379a9fdd4af48967efff26b200e1ab649f63517
Instruction ID: 8b69319c21aec3ddee00cb00959702adc85bce415fb2168130725632d218664d
Opcode Fuzzy Hash: 48e4cdac09fd2584f099d7bad379a9fdd4af48967efff26b200e1ab649f63517
Instruction Fuzzy Hash: C671B3B5D002099FDB18EFA8D991BEEBBB5AF48304F20412EE515B7381DB342A45CF65

Function 00406B70 Relevance: 17.8, APIs: 6, Strings: 4, Instructions: 325stringCOMMON

Download Yara Rule

APIs

GetClassNameW.USER32(?,00000000,00000008), ref: 00406BCD
lstrcmpiW.KERNEL32(00000000,static), ref: 00406BE4

Part of subcall function 00407320: GetWindowLongW.USER32(-00000004,000000F0), ref: 00407331

Part of subcall function 00406840: GetWindowLongW.USER32(?,000000F0), ref: 0040684F

LoadCursorW.USER32(00000000,00007F89), ref: 00406C72
GetStockObject.GDI32(0000000D), ref: 00406CC9
memset.MSVCR80 ref: 00406D0D
CreateFontIndirectW.GDI32(00000000), ref: 00406D7E

Strings

Anchor Color Visited, xrefs: 00407045
Anchor Color, xrefs: 00406FE4
Software\Microsoft\Internet Explorer\Settings, xrefs: 00406F6A
static, xrefs: 00406BDB

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: LongWindow$ClassCreateCursorFontIndirectLoadNameObjectStocklstrcmpimemset
String ID: Anchor Color$Anchor Color Visited$Software\Microsoft\Internet Explorer\Settings$static
API String ID: 537339791-2739629574
Opcode ID: 99ecedde21c05c3d22bbeafe7e2b67f4cdb7fe62b879cd42fd35616c0f2689b9
Instruction ID: 199e44e7be4628ee2e688c610ba56af09b0a08d7a3a9a70c30624c5daa12086b
Opcode Fuzzy Hash: 99ecedde21c05c3d22bbeafe7e2b67f4cdb7fe62b879cd42fd35616c0f2689b9
Instruction Fuzzy Hash: 45E14970A042689FDB64DB65CC49BAEB7B1AF04304F1042EAE54A772D2DB346EC4CF59

Function 004AAFD0 Relevance: 17.8, APIs: 6, Strings: 4, Instructions: 254COMMON

Download Yara Rule

Strings

AN, xrefs: 004AAFEC
No such effect found in stack, xrefs: 004AB072
Effect pointer is NULL., xrefs: 004AB018
CEffectStack::SelectEffect, xrefs: 004AAFF8

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: clock$AllocatorDebugHeapfflushfwprintf
String ID: CEffectStack::SelectEffect$Effect pointer is NULL.$No such effect found in stack$AN
API String ID: 2739697835-3664681806
Opcode ID: 221cc7908e8e233be853d1dd1845420aec90c9ea438a58ddf34726c8fe8ac0e0
Instruction ID: 60628f8e65fa033cdeac9a30f19292ee3b75e2ecbf0df95034a13fcf3e9652a5
Opcode Fuzzy Hash: 221cc7908e8e233be853d1dd1845420aec90c9ea438a58ddf34726c8fe8ac0e0
Instruction Fuzzy Hash: FEB13A70E00208DFDB14DFA9C895BEEBBB5FF59314F10811EE415AB292DB786905CB98

Function 00BC9C70 Relevance: 17.7, APIs: 8, Strings: 2, Instructions: 160COMMON

Download Yara Rule

APIs

_ftol.MSVCR80 ref: 00BC9E39
_ftol.MSVCR80 ref: 00BC9E54
_ftol.MSVCR80 ref: 00BC9E6F
_ftol.MSVCR80 ref: 00BC9E8A
_ftol.MSVCR80 ref: 00BC9EA5
_ftol.MSVCR80 ref: 00BC9EC0
_ftol.MSVCR80 ref: 00BC9EDB
_ftol.MSVCR80 ref: 00BC9EF6

Strings

Ignoring attempt to set chromaticity value exceeding 21474.83, xrefs: 00BC9F0B
Ignoring attempt to set negative chromaticity value, xrefs: 00BC9F1B

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: _ftol
String ID: Ignoring attempt to set chromaticity value exceeding 21474.83$Ignoring attempt to set negative chromaticity value
API String ID: 2545261903-1928962588
Opcode ID: 5c1982fcc1c2e23d49200daeed24c7c9a6b2f93f26fe71ebc45f102fcf254003
Instruction ID: cb0be7dd3304347787c2382972b6f522b06a7fc624e577251d56ded420a3600a
Opcode Fuzzy Hash: 5c1982fcc1c2e23d49200daeed24c7c9a6b2f93f26fe71ebc45f102fcf254003
Instruction Fuzzy Hash: 3C511470004B99D7EB149B10FA4C7867BF8FB89381F410E9DE1E5561ADCF74E4A98B42

Function 00BCCC40 Relevance: 17.7, APIs: 1, Strings: 9, Instructions: 159COMMON

Download Yara Rule

Strings

Ignoring incorrect cHRM value when sRGB is also present, xrefs: 00BCCE14
Missing IHDR before sRGB, xrefs: 00BCCC4E
Duplicate sRGB chunk, xrefs: 00BCCC9E
incorrect gamma=(%d/100000), xrefs: 00BCCD53
Out of place sRGB chunk, xrefs: 00BCCC80
Ignoring incorrect gAMA value when sRGB is also present, xrefs: 00BCCD38
Unknown sRGB intent, xrefs: 00BCCD0C
Incorrect sRGB chunk length, xrefs: 00BCCCC4
Invalid sRGB after IDAT, xrefs: 00BCCC5F

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID: Duplicate sRGB chunk$Ignoring incorrect cHRM value when sRGB is also present$Ignoring incorrect gAMA value when sRGB is also present$Incorrect sRGB chunk length$Invalid sRGB after IDAT$Missing IHDR before sRGB$Out of place sRGB chunk$Unknown sRGB intent$incorrect gamma=(%d/100000)
API String ID: 0-1854797742
Opcode ID: 34bec36de548159a2262d300429ee923141c45d8b59d1def519163bf5a5e8678
Instruction ID: 316e55971808ccc759846834dac82936c930743666b5a8f9b4e37670b9fd9318
Opcode Fuzzy Hash: 34bec36de548159a2262d300429ee923141c45d8b59d1def519163bf5a5e8678
Instruction Fuzzy Hash: 2E41E77160020626E7249618D8C6FBF6BD8DFA2B55F1408EDF58ED3793C718FC649262

Function 005139F0 Relevance: 17.6, APIs: 7, Strings: 3, Instructions: 149memoryCOMMON

Download Yara Rule

APIs

??0CxImage@@QAE@K@Z.CXIMAGECRT(00000000,?,?,4FF694EA), ref: 00513A57
~_Mpunct.LIBCPMTD ref: 00513AF1

Part of subcall function 004166C0: ?DestroyFrames@CxImage@@QAE_NXZ.CXIMAGECRT(?,?,0050679A,You have selected an image with the dimension larger than 3000x2000.,00000000,00000000), ref: 004166D3
Part of subcall function 004166C0: ?Destroy@CxImage@@QAE_NXZ.CXIMAGECRT(?,?,0050679A,You have selected an image with the dimension larger than 3000x2000.,00000000,00000000), ref: 004166DB

??2@YAPAXI@Z.MSVCR80(000001C4,352x288,?,?,?,?,00000000,?,?,4FF694EA), ref: 00513B1A
??0CxImage@@QAE@ABV0@_N11@Z.CXIMAGECRT(?,00000001,00000001,00000001,00000000,?,?,4FF694EA), ref: 00513B48
~_Mpunct.LIBCPMTD ref: 00513B85
_DebugHeapAllocator.LIBCPMTD ref: 00513A74

Part of subcall function 00416740: _DebugHeapAllocator.LIBCPMTD ref: 00416795

Part of subcall function 0050DF50: _DebugHeapAllocator.LIBCPMTD ref: 0050DF91
Part of subcall function 0050DF50: _DebugHeapAllocator.LIBCPMTD ref: 0050DFAD

_DebugHeapAllocator.LIBCPMTD ref: 00513BCC

Strings

352x288, xrefs: 00513BF0
%d.png, xrefs: 00513A34
352x288, xrefs: 00513A98

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$Image@@$Mpunct$??2@DestroyDestroy@Frames@N11@V0@_
String ID: %d.png$352x288$352x288
API String ID: 1128305235-4221946874
Opcode ID: 3d3a3092ae457ba20b6bf654cef30ca65db4711d383323e92277891cfebd2fe8
Instruction ID: 81933645b3eb8f3328e915e61d60693adeebe1464ca0442654379e8e1d16d656
Opcode Fuzzy Hash: 3d3a3092ae457ba20b6bf654cef30ca65db4711d383323e92277891cfebd2fe8
Instruction Fuzzy Hash: F07116B0D01259DADB24EB64D899BEEBBB4BB04304F1086EDE419A72C1DB745F84CF94

Function 005047C0 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 70COMMON

Download Yara Rule

APIs

??0_Lockit@std@@QAE@H@Z.MSVCP80(00000000,4FF694EA,?,?,?,00000000,00538D49,000000FF,?,0050405E,?), ref: 005047EA
??Bid@locale@std@@QAEIXZ.MSVCP80(?,?,?,00000000,00538D49,000000FF,?,0050405E), ref: 00504804
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z.MSVCP80(00538D49,?,?,?,00000000,00538D49,000000FF,?,0050405E), ref: 00504814
??1_Lockit@std@@QAE@XZ.MSVCP80(00585C98,00585C98), ref: 00504898

Strings

bad cast, xrefs: 00504844
^@P, xrefs: 00504811

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_Bid@locale@std@@Getfacet@locale@std@@Vfacet@12@
String ID: ^@P$bad cast
API String ID: 2261832285-3230263104
Opcode ID: 3b2a1131cef9067ba1ac1022581be8c82768a399d86bdfc45b63dcb7fc16c2e6
Instruction ID: 824bbbae0ea1dedba38b35fd60e665a14d2ea96d15b6e9388a122e9d75c37290
Opcode Fuzzy Hash: 3b2a1131cef9067ba1ac1022581be8c82768a399d86bdfc45b63dcb7fc16c2e6
Instruction Fuzzy Hash: 4631F9B4D04209DFDB08DFA5E845AAEBBB5FF58310F108A2AE922A33D0DB745905DF50

Function 00499B60 Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 70COMMON

Download Yara Rule

APIs

??0_Lockit@std@@QAE@H@Z.MSVCP80(00000000,4FF694EA,?,00495099,00531878,000000FF,?,004968AA,00495099,?), ref: 00499B8A
??Bid@locale@std@@QAEIXZ.MSVCP80(?,00495099,00531878,000000FF,?,004968AA,00495099,?), ref: 00499BA5
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z.MSVCP80(?,?,00495099,00531878,000000FF,?,004968AA,00495099,?), ref: 00499BB5
??1_Lockit@std@@QAE@XZ.MSVCP80(?,?,00495099), ref: 00499C3A

Strings

bad cast, xrefs: 00499BE6

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_Bid@locale@std@@Getfacet@locale@std@@Vfacet@12@
String ID: bad cast
API String ID: 2261832285-3145022300
Opcode ID: e8d9317ff7b667e4345a0d9ab4755c0ed9f6fbdd2f1abd810e1704a9855df511
Instruction ID: ac16ab481d142800d0c9b8599a912b67046f6ada141286fa39e373667d809841
Opcode Fuzzy Hash: e8d9317ff7b667e4345a0d9ab4755c0ed9f6fbdd2f1abd810e1704a9855df511
Instruction Fuzzy Hash: 9A31FDB4D04219DFDF04DF98EC44AAEBBB5FB58310F10862AE922A33A0D7785905DF55

Function 00403D80 Relevance: 16.9, APIs: 11, Instructions: 407COMMON

Download Yara Rule

APIs

_CIpow.MSVCR80 ref: 00403DCF
cvSetImageROI.CXCORE099(?), ref: 00403E20
cvSetImageROI.CXCORE099(?), ref: 00403E3E
cvSetImageROI.CXCORE099(?), ref: 00403E5C
cvSet.CXCORE099(?), ref: 00403E87
cvSet.CXCORE099(?), ref: 00403EB2
cvSet.CXCORE099(?), ref: 00403EEA
cvGEMM.CXCORE099(?,?), ref: 00403F4E
cvGEMM.CXCORE099(?,?), ref: 00403F7F
cvGEMM.CXCORE099(?,?), ref: 0040405F
cvGEMM.CXCORE099(?,?), ref: 00404090

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Image$Ipow
String ID:
API String ID: 2361920412-0
Opcode ID: ae5365c12a2100a1903be52b5529a37c0f6dfca9bd181234086edb2fe99e62fb
Instruction ID: 2a68433d30ada8fa05db26af022ad57aeecc5f41bf496e9e98d865bd8f4dde78
Opcode Fuzzy Hash: ae5365c12a2100a1903be52b5529a37c0f6dfca9bd181234086edb2fe99e62fb
Instruction Fuzzy Hash: 180255B0608301CFC314DF29D585A5ABBF1FF88304F11899DE9999B2A6D731E865CF86

Function 00BCBD20 Relevance: 16.8, APIs: 2, Strings: 9, Instructions: 314COMMON

Download Yara Rule

APIs

sprintf.MSVCR80 ref: 00BCC017
sprintf.MSVCR80 ref: 00BCC0BD

Strings

Incomplete compressed datastream in %s chunk, xrefs: 00BCC011
Not enough memory for text., xrefs: 00BCC054
Error decoding compressed text, xrefs: 00BCBF15, 00BCBFB0
Not enough memory to decompress chunk, xrefs: 00BCBF59
Not enough memory to decompress chunk.., xrefs: 00BCBE5C
Buffer error in compressed datastream in %s chunk, xrefs: 00BCBFE6
Not enough memory to decompress chunk., xrefs: 00BCBDD5
Unknown zTXt compression type %d, xrefs: 00BCC0B7
Data error in compressed datastream in %s chunk, xrefs: 00BCBFFE

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: sprintf
String ID: Buffer error in compressed datastream in %s chunk$Data error in compressed datastream in %s chunk$Error decoding compressed text$Incomplete compressed datastream in %s chunk$Not enough memory for text.$Not enough memory to decompress chunk$Not enough memory to decompress chunk.$Not enough memory to decompress chunk..$Unknown zTXt compression type %d
API String ID: 590974362-1349257056
Opcode ID: 03e8a436af0452d7d0fc35e49495f8f2e3c23edf790081abf77f008e75992bcf
Instruction ID: 2a8e3d0b027704f0fafe2ff4d932476c362ffc531be6d7a43efe0205aee99fcf
Opcode Fuzzy Hash: 03e8a436af0452d7d0fc35e49495f8f2e3c23edf790081abf77f008e75992bcf
Instruction Fuzzy Hash: B9B181716042098FCB24DE68C892FAFB7EAEF94700F44456CFE4697341DBB5A908CB52

Function 00BA1AA0 Relevance: 16.7, APIs: 11, Instructions: 152windowCOMMON

Download Yara Rule

APIs

memset.MSVCR80 ref: 00BA1AC2
IsWindow.USER32(?), ref: 00BA1ACB
SendMessageA.USER32(?,0000042C,0000002C,?), ref: 00BA1AE5
ICSendMessage.MSVFW32(?,0000400E,00000000,00000000), ref: 00BA1B7D
ICClose.MSVFW32(?,?,0000400E,00000000,00000000), ref: 00BA1B86
ICOpen.MSVFW32(43444956,?,00000002), ref: 00BA1B97
ICSendMessage.MSVFW32(00000000,0000400C,?,?,43444956,?,00000002), ref: 00BA1BB7
cvReleaseImage.CXCORE099(?,00000000,0000400C,?,?,43444956,?,00000002), ref: 00BA1BC8
cvCreateImage.CXCORE099(?,?,00000008,00000003,?,00000000,0000400C,?,?,43444956,?,00000002), ref: 00BA1BDB
ICDecompress.MSVFW32(?,00000000,?,?,00000008,?,?,?,00000008,00000003,?,00000000,0000400C,?,?,43444956), ref: 00BA1C08
cvInitImageHeader.CXCORE099(?,?,?,00000008,00000003,00000001,00000004,?,?,?,?,00000000,0000400C,?,?,43444956), ref: 00BA1C2F

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: ImageMessageSend$CloseCreateDecompressHeaderInitOpenReleaseWindowmemset
String ID:
API String ID: 2363853983-0
Opcode ID: 50b875148ec33dc1ca9a1d2db0b0a5f6fe3a4931c3b4e3c291555576dfb2839d
Instruction ID: 4702688a65288eab2fd8a303559e603f0e26f82e934de1b6ec7fec6f3aa6c486
Opcode Fuzzy Hash: 50b875148ec33dc1ca9a1d2db0b0a5f6fe3a4931c3b4e3c291555576dfb2839d
Instruction Fuzzy Hash: 24518E712483009BDB64EF28CC85F6B77E9EF95710F54089CFA40AB282E771E845CB91

Function 004087B0 Relevance: 16.2, APIs: 7, Strings: 2, Instructions: 464memoryCOMMON

Download Yara Rule

APIs

GetSystemMetrics.USER32(00000004), ref: 004087E6

Part of subcall function 0040DA70: SetWindowPos.USER32(000001E2,-0000012B,000001E2,00000000,00000000,00000000,0040880B,?,?,0040880B,00000000,00000000,00000000,000001E2,-0000012B), ref: 0040DA95

Part of subcall function 004065F0: GetParent.USER32(?), ref: 004065FD

Part of subcall function 00406670: GetParent.USER32 ref: 0040669A
Part of subcall function 00406670: GetWindowRect.USER32(?,?), ref: 004066C0
Part of subcall function 00406670: GetWindowLongW.USER32(00000000,000000F0), ref: 004066DD
Part of subcall function 00406670: SystemParametersInfoW.USER32(00000030,00000000,?,00000000), ref: 0040670D

Part of subcall function 004CB5F0: SHGetSpecialFolderPathW.SHELL32(00000000,?,?,00000000), ref: 004CB626
Part of subcall function 004CB5F0: _wmkdir.MSVCR80 ref: 004CB633

Part of subcall function 0040EE30: _DebugHeapAllocator.LIBCPMTD ref: 0040EE68
Part of subcall function 0040EE30: _DebugHeapAllocator.LIBCPMTD ref: 0040EEAA

Part of subcall function 004164A0: FindFirstFileW.KERNEL32(00000000,00000104,000000D8,00000104,00000000), ref: 004164F5

MoveWindow.USER32(00000000,?,00000485,00000015,0000002D,00000052,00000017,00000000,00000117,000000C6,000000AF,00000017,00000001,00000000,?,0000048A), ref: 00408C6C
MoveWindow.USER32(00000000,?,0000048B,0000011C,00000104,00000058,00000017,00000000), ref: 00408CA4
MoveWindow.USER32(00000000,?,0000048C,0000017A,00000104,00000058,00000017,00000000), ref: 00408CDC
Concurrency::details::SchedulerBase::GetPolicy.LIBCMTD ref: 00408D50
Concurrency::task_options::get_scheduler.LIBCPMTD ref: 00408DF3
_DebugHeapAllocator.LIBCPMTD ref: 00408E57

Strings

\ManyCam\TempBackgroundPreview, xrefs: 00408853
http://manycam.com/help/effects, xrefs: 00408A61

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Window$AllocatorDebugHeapMove$ParentSystem$Base::Concurrency::details::Concurrency::task_options::get_schedulerFileFindFirstFolderInfoLongMetricsParametersPathPolicyRectSchedulerSpecial_wmkdir
String ID: \ManyCam\TempBackgroundPreview$http://manycam.com/help/effects
API String ID: 802195438-2992585156
Opcode ID: ad0380625fa3cecf4b5e51684995b29088e82c278d6510ee7f53ab51bdbc22ca
Instruction ID: 373e2faf4f294b9354e902988eb878b0a96774ffebd8d1961b2fcec7c08dd6c9
Opcode Fuzzy Hash: ad0380625fa3cecf4b5e51684995b29088e82c278d6510ee7f53ab51bdbc22ca
Instruction Fuzzy Hash: 11121F70A041189BEB24EB55CD91BED7775AF44308F0044EEA20E7B2C2DE796E94CF69

Function 004099E0 Relevance: 16.2, APIs: 7, Strings: 2, Instructions: 433memoryCOMMON

Download Yara Rule

APIs

memset.MSVCR80 ref: 00409A4E

Part of subcall function 0040F0F0: SendMessageW.USER32(-0000012F,00000147,00000000,00000000), ref: 0040F106

Concurrency::details::SchedulerBase::GetPolicy.LIBCMTD ref: 00409AD9
_DebugHeapAllocator.LIBCPMTD ref: 00409B1D

Strings

mce, xrefs: 00409B54
New category..., xrefs: 0040A084

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorBase::Concurrency::details::DebugHeapMessagePolicySchedulerSendmemset
String ID: New category...$mce
API String ID: 1679045135-800315401
Opcode ID: 84cff37b60f26b6a8f6ffd572ec932ad64bfde54e516b5dd0315aff2655b6aaf
Instruction ID: f62fc7b589a48f9eaf1a8544f81ff00b290309f3dd4f0067dcca3c15644f716f
Opcode Fuzzy Hash: 84cff37b60f26b6a8f6ffd572ec932ad64bfde54e516b5dd0315aff2655b6aaf
Instruction Fuzzy Hash: B5121D719012199BCB24EB65CC99BAEB7B5AF44304F1041EEE10AB72D1DB386F84CF59

Function 004D1350 Relevance: 16.0, APIs: 7, Strings: 2, Instructions: 253COMMON

Download Yara Rule

APIs

Part of subcall function 00438A10: clock.MSVCR80 ref: 00438AA7
Part of subcall function 00438A10: _DebugHeapAllocator.LIBCPMTD ref: 00438AC5

GetTickCount.KERNEL32 ref: 004D1414
GetTickCount.KERNEL32 ref: 004D1444
Concurrency::cancellation_token_source::~cancellation_token_source.LIBCPMTD ref: 004D14CE

Part of subcall function 00438AF0: clock.MSVCR80 ref: 00438B1F

Strings

Playback mode is now %s., xrefs: 004D165E
CPlayList::SetPlaybackMode (%s), xrefs: 004D1387

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: CountTickclock$AllocatorConcurrency::cancellation_token_source::~cancellation_token_sourceDebugHeap
String ID: CPlayList::SetPlaybackMode (%s)$Playback mode is now %s.
API String ID: 1115989059-4040813284
Opcode ID: 263e4469555b9ead60d827bbea961355ac1bf97b033ce6d991a803799773ecf7
Instruction ID: 9d0510614a657932bc22ac5f2c18324a99722429085df9436aa323c14c0834bd
Opcode Fuzzy Hash: 263e4469555b9ead60d827bbea961355ac1bf97b033ce6d991a803799773ecf7
Instruction Fuzzy Hash: 66B14CB0E04218EFDB04DFD8C8A5BAEBBB1BF44308F10815EE8066B395DB789945CB55

Function 00BCDC20 Relevance: 15.9, APIs: 2, Strings: 7, Instructions: 187COMMON

Download Yara Rule

Strings

malformed width string in sCAL chunk, xrefs: 00BCDD12
Invalid sCAL after IDAT, xrefs: 00BCDC71
Out of memory while processing sCAL chunk, xrefs: 00BCDC57
malformed height string in sCAL chunk, xrefs: 00BCDD55
Missing IHDR before sCAL, xrefs: 00BCDC32
Invalid sCAL data, xrefs: 00BCDDC6
Duplicate sCAL chunk, xrefs: 00BCDCA2

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID: Duplicate sCAL chunk$Invalid sCAL after IDAT$Invalid sCAL data$Missing IHDR before sCAL$Out of memory while processing sCAL chunk$malformed height string in sCAL chunk$malformed width string in sCAL chunk
API String ID: 0-2190877121
Opcode ID: bab7ede6899f831a85cd9e058fca23ef66f46a4d6eb78a3f3b7ee3211c64a1a4
Instruction ID: 6da9491633cea72033b02635c125405dc63d0c45a20a7d5240bb4be781de2653
Opcode Fuzzy Hash: bab7ede6899f831a85cd9e058fca23ef66f46a4d6eb78a3f3b7ee3211c64a1a4
Instruction Fuzzy Hash: 5B413C7560420867D7007B04ACC2F7F77ECDFC6B65F8405EDF98852242D72A991A83B2

Function 00BCC470 Relevance: 15.9, APIs: 1, Strings: 8, Instructions: 130COMMON

Download Yara Rule

APIs

fprintf.MSVCR80 ref: 00BCC58D

Strings

Out of place gAMA chunk, xrefs: 00BCC4B0
Ignoring gAMA chunk with gamma=0, xrefs: 00BCC548
Missing IHDR before gAMA, xrefs: 00BCC47E
Invalid gAMA after IDAT, xrefs: 00BCC48F
gamma = (%d/100000), xrefs: 00BCC587
Ignoring incorrect gAMA value when sRGB is also present, xrefs: 00BCC572
Duplicate gAMA chunk, xrefs: 00BCC4D2
Incorrect gAMA chunk length, xrefs: 00BCC4F8

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: fprintf
String ID: Duplicate gAMA chunk$Ignoring gAMA chunk with gamma=0$Ignoring incorrect gAMA value when sRGB is also present$Incorrect gAMA chunk length$Invalid gAMA after IDAT$Missing IHDR before gAMA$Out of place gAMA chunk$gamma = (%d/100000)
API String ID: 383729395-996772653
Opcode ID: 593b88c97a9976c3c8c99226a2e9c539dabee225a022060e88f5ce878648b325
Instruction ID: 9665b230f73bb128abc2f501cca9dd3b475da1c5f752b3fb6cdad2ccbd67c97b
Opcode Fuzzy Hash: 593b88c97a9976c3c8c99226a2e9c539dabee225a022060e88f5ce878648b325
Instruction Fuzzy Hash: E53139B27046082BD714BA58EC83FBF67CCDFE1755F0404EDF688A3253DB14990982A6

Function 00BA5370 Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 116COMMON

Download Yara Rule

APIs

cvError.CXCORE099(000000E5,cvResizeWindow,NULL name,.\window_w32.cpp,000002A9), ref: 00BA5392
MoveWindow.USER32(?,?,?,?,?,00000000), ref: 00BA540A
GetClientRect.USER32(?,?), ref: 00BA5415
GetWindowRect.USER32(?,?), ref: 00BA5424
MoveWindow.USER32(?,00000001,?,?,?,00000001,?,?,?,?,00000000), ref: 00BA5460
MoveWindow.USER32(?,?,?,?,?,00000001), ref: 00BA54A2

Strings

.\window_w32.cpp, xrefs: 00BA5381
NULL name, xrefs: 00BA5386
cvResizeWindow, xrefs: 00BA538B

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Window$Move$Rect$ClientError
String ID: .\window_w32.cpp$NULL name$cvResizeWindow
API String ID: 3901070998-2204944233
Opcode ID: 14b146deef1c1d077b1e24696d04bbb0f2493de2ff87b6aefdc8669cbf3e72a0
Instruction ID: ab82a9b95db38eb47d8dedaa258b8013c1d25457008e02666e3223408be5458c
Opcode Fuzzy Hash: 14b146deef1c1d077b1e24696d04bbb0f2493de2ff87b6aefdc8669cbf3e72a0
Instruction Fuzzy Hash: AC318A75618341AFC714DF68CD85D2BB7E9FFC8714F098A4CF98A97254E6B0E900CA91

Function 0050E050 Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 116memoryCOMMON

Download Yara Rule

APIs

_DebugHeapAllocator.LIBCPMTD ref: 0050E09D
_DebugHeapAllocator.LIBCPMTD ref: 0050E0C5

Part of subcall function 0050E4A0: _DebugHeapAllocator.LIBCPMTD ref: 0050E4E3
Part of subcall function 0050E4A0: _DebugHeapAllocator.LIBCPMTD ref: 0050E4FF

??0CxImage@@QAE@PAEKK@Z.CXIMAGECRT(&<Q,?,00000000,?,?,?,&<Q), ref: 0050E12E
?Encode2RGBA@CxImage@@QAE_NAAPAEAAJ_N@Z.CXIMAGECRT(00000000,00000000,00000000,&<Q,?,00000000,?,?,?,&<Q), ref: 0050E155
?GetHeight@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,&<Q,?,00000000,?,?,?,&<Q), ref: 0050E160
?GetWidth@CxImage@@QBEKXZ.CXIMAGECRT(00000000,00000000,00000000,00000000,&<Q,?,00000000,?,?,?,&<Q), ref: 0050E16C
??3@YAXPAX@Z.MSVCR80(?,00000000,?,?,00000008,00000004,00000000,00000004,00000000,00000000,00000000,00000000,00000000,&<Q,?,00000000), ref: 0050E1B7
~_Mpunct.LIBCPMTD ref: 0050E1D3

Strings

&<Q, xrefs: 0050E08C, 0050E124, 0050E1A7, 0050E08F, 0050E090, 0050E127

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeapImage@@$??3@Encode2Height@MpunctWidth@
String ID: &<Q
API String ID: 2867035028-2887711709
Opcode ID: fbbaa05d77a0a2c3aee7ba4de5523e50d8f2c9dc1e9e8a6a3e8fff9c4fd9968c
Instruction ID: 4fa1d1e2ea6a526748637154a1db03ed3227427cf2602f353b57d12039db24cc
Opcode Fuzzy Hash: fbbaa05d77a0a2c3aee7ba4de5523e50d8f2c9dc1e9e8a6a3e8fff9c4fd9968c
Instruction Fuzzy Hash: 175137B1D00259AFDB14EF54CC46BEEBBB8AF54304F1082ADE519A7281DB746B84CF90

Function 004197E0 Relevance: 15.8, APIs: 3, Strings: 6, Instructions: 80memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 004CB670: _DebugHeapAllocator.LIBCPMTD ref: 004CB6AA
Part of subcall function 004CB670: _DebugHeapAllocator.LIBCPMTD ref: 004CB711
Part of subcall function 004CB670: _DebugHeapAllocator.LIBCPMTD ref: 004CB76F
Part of subcall function 004CB670: _DebugHeapAllocator.LIBCPMTD ref: 004CB787

_DebugHeapAllocator.LIBCPMTD ref: 0041987F

Part of subcall function 0040EA00: _DebugHeapAllocator.LIBCPMTD ref: 0040EA0E

Part of subcall function 0040EE30: _DebugHeapAllocator.LIBCPMTD ref: 0040EE68
Part of subcall function 0040EE30: _DebugHeapAllocator.LIBCPMTD ref: 0040EEAA

_DebugHeapAllocator.LIBCPMTD ref: 004198BD
?Load@CxImage@@QAE_NPB_WK@Z.CXIMAGECRT(00000000,00000000,.png,0000047D,00000046,0053E730,data\images\backgroundControl\background\,00000046,?,?,4FF694EA,?,0000047D,00000023,00000046), ref: 004198E0

Strings

data\images\backgroundControl\background\, xrefs: 00419877
0S, xrefs: 00419808
LS, xrefs: 0041980F
`S, xrefs: 00419816
.png, xrefs: 004198B5
S, xrefs: 00419839

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$Image@@Load@
String ID: .png$0S$LS$`S$data\images\backgroundControl\background\$S
API String ID: 1315443971-3997788365
Opcode ID: 02809580c12525f98958325a7bfa43803c747b7b9b7e3c1d56384f9c16ba48a1
Instruction ID: c255484564948487ca09c12a6e8e79ec8d091f34d803f33d82e763e2732db065
Opcode Fuzzy Hash: 02809580c12525f98958325a7bfa43803c747b7b9b7e3c1d56384f9c16ba48a1
Instruction Fuzzy Hash: B13114B1D11288EBDB08EF95D886BDEBBF4FB05308F10452EE4117B281DB741949CB99

Function 00504470 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 70COMMON

Download Yara Rule

APIs

??0_Lockit@std@@QAE@H@Z.MSVCP80(00000000,4FF694EA,?,00538D19,000000FF,?,005028F6,?,?,00000000,00000001), ref: 0050449A
??Bid@locale@std@@QAEIXZ.MSVCP80(?,005028F6,?,?,00000000), ref: 005044B4
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z.MSVCP80(005028F6,?,005028F6,?,?,00000000), ref: 005044C4
??1_Lockit@std@@QAE@XZ.MSVCP80(00585C98,00585C98), ref: 00504548

Strings

bad cast, xrefs: 005044F4

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_Bid@locale@std@@Getfacet@locale@std@@Vfacet@12@
String ID: bad cast
API String ID: 2261832285-3145022300
Opcode ID: 923687adefb6f0c19f08b85b92506c3169178af31264b40b8c27a0d15710eb83
Instruction ID: daf008f5657916d2d0eedf94b6e793cb89aacae9b3ddac5973414a6306a2ac1a
Opcode Fuzzy Hash: 923687adefb6f0c19f08b85b92506c3169178af31264b40b8c27a0d15710eb83
Instruction Fuzzy Hash: CE31F7B5D04209DFDB18DFA4EC45AAEBBB4FB58310F10862AE922A33D0DB745945DF50

Function 00BA6810 Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 51registrywindowCOMMON

Download Yara Rule

APIs

LoadIconA.USER32 ref: 00BA685D
LoadCursorA.USER32(00000000,00007F03), ref: 00BA686D
GetStockObject.GDI32(00000002), ref: 00BA687F
RegisterClassA.USER32(?), ref: 00BA6890
GetStockObject.GDI32(00000002), ref: 00BA68A1
RegisterClassA.USER32(?), ref: 00BA68B4

Part of subcall function 00BEBDA9: __onexit.MSVCRT ref: 00BEBDAD

Strings

#, xrefs: 00BA683D
Main HighGUI class, xrefs: 00BA6892
HighGUI class, xrefs: 00BA682C

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: ClassLoadObjectRegisterStock$CursorIcon__onexit
String ID: #$HighGUI class$Main HighGUI class
API String ID: 1477171359-2338146754
Opcode ID: 93504b5a17818388feb855d2c8f4a0815dd19730e753e46a9f16b6605b6c1b3e
Instruction ID: 525ef8c42a3828b29b4eac43b3ae00bbf6fb1fcfe0db2c40d3b0e2dd9af622a1
Opcode Fuzzy Hash: 93504b5a17818388feb855d2c8f4a0815dd19730e753e46a9f16b6605b6c1b3e
Instruction Fuzzy Hash: B5113DB28193519FC740EF69DC8460ABFE4FB88704F00096EF584DB261D7B49688CF82

Function 00402680 Relevance: 15.4, APIs: 10, Instructions: 409COMMON

Download Yara Rule

APIs

cvSet.CXCORE099(?,?,?,?,?,?,00000000), ref: 004026F7
cvGEMM.CXCORE099(?,?), ref: 00402755
_CIsqrt.MSVCR80 ref: 004027F6
cvGEMM.CXCORE099(?,?), ref: 00402852
cvSet2D.CXCORE099(?,?,?), ref: 004028DB
cvGEMM.CXCORE099(?,?,?,00000000,?,00000000), ref: 00402925
cvSet2D.CXCORE099(?,?,?), ref: 0040299E
cvGEMM.CXCORE099(?,?,?,00000000,?,00000000), ref: 00402A4D
cvGEMM.CXCORE099(?,?), ref: 00402ADA
cvLine.CXCORE099(?,?,?,?,?), ref: 00402B4D

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Set2$IsqrtLine
String ID:
API String ID: 2296038289-0
Opcode ID: 5380ecd6c58ae11980828ad1f4b84ea6df1e54ba14efa23bf64b0481e8ed7457
Instruction ID: 98af563dca7e08dae4733c818569099b16958337ef14baff457f1a71e3476642
Opcode Fuzzy Hash: 5380ecd6c58ae11980828ad1f4b84ea6df1e54ba14efa23bf64b0481e8ed7457
Instruction Fuzzy Hash: C8F16CB1A05601DFC305AF60D589A6ABFF0FF84740F614D88E4D5262A9E731D8B5CF86

Function 00BE27C0 Relevance: 15.2, APIs: 10, Instructions: 166COMMON

Download Yara Rule

APIs

_ftol.MSVCR80 ref: 00BE2851
_ftol.MSVCR80 ref: 00BE286B
_ftol.MSVCR80 ref: 00BE288F
_ftol.MSVCR80 ref: 00BE28AA
_ftol.MSVCR80 ref: 00BE28EB
_ftol.MSVCR80 ref: 00BE2904
_ftol.MSVCR80 ref: 00BE293C
_ftol.MSVCR80 ref: 00BE2955
_ftol.MSVCR80 ref: 00BE29C3
_ftol.MSVCR80 ref: 00BE29E2

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: _ftol
String ID:
API String ID: 2545261903-0
Opcode ID: 00a442aeebb0919aaa7e25a4ca194d56f4c7d886c8db257d341172305fe90cbe
Instruction ID: d46319963242a1978ae7429a7788f43030a465bad19a9499f848b0f604a91ece
Opcode Fuzzy Hash: 00a442aeebb0919aaa7e25a4ca194d56f4c7d886c8db257d341172305fe90cbe
Instruction Fuzzy Hash: 065105716003429FD3069F22D989656BFF4FF84340F124A2CE1C69B6BADB349466CF82

Function 00BA5630 Relevance: 15.1, APIs: 10, Instructions: 145COMMON

Download Yara Rule

APIs

Part of subcall function 00BA4A80: GetWindowLongA.USER32(?,000000EB), ref: 00BA4A83

DefWindowProcA.USER32(?,?,?,?), ref: 00BA5656
CallWindowProcA.USER32(?,?,?,?,?), ref: 00BA5687

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Window$Proc$CallLong
String ID:
API String ID: 2055830364-0
Opcode ID: bad180fa8cd119ccff61cbb070bda9d9e52943e96628c4d7d914633d5311f2cb
Instruction ID: ced1d81328239d297c793980f0b7dbc3a038acd86084c45853f2a69ddab4d3bc
Opcode Fuzzy Hash: bad180fa8cd119ccff61cbb070bda9d9e52943e96628c4d7d914633d5311f2cb
Instruction Fuzzy Hash: 94414FB6604701AFE724DB28DC85F6BB3E8FB88710F408A1DFA4597291D770ED118BA5

Function 00BA57F0 Relevance: 15.1, APIs: 10, Instructions: 96windowsleepCOMMON

Download Yara Rule

APIs

GetTickCount.KERNEL32 ref: 00BA57F7
GetTickCount.KERNEL32 ref: 00BA5816
GetMessageA.USER32(?,00000000,00000000,00000000), ref: 00BA5849
DispatchMessageA.USER32(?), ref: 00BA5889
PeekMessageA.USER32(?,00000000,00000000,00000000,00000001), ref: 00BA58A4
Sleep.KERNEL32(00000001), ref: 00BA58B0
TranslateMessage.USER32(?), ref: 00BA58C0
DispatchMessageA.USER32(?), ref: 00BA58CB
TranslateMessage.USER32(?), ref: 00BA58EA
DispatchMessageA.USER32(?), ref: 00BA58F5

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Message$Dispatch$CountTickTranslate$PeekSleep
String ID:
API String ID: 2014057112-0
Opcode ID: f3cfc78efd10430269e3f38d4cb29d39613e92b5c372d9ef4474ba68cc097903
Instruction ID: e57341f2003a130b8ea400c21b5f2c97c76a71b7ed0fd181e3bebd23909b6024
Opcode Fuzzy Hash: f3cfc78efd10430269e3f38d4cb29d39613e92b5c372d9ef4474ba68cc097903
Instruction Fuzzy Hash: ED31F13224C7029BD730DF64DD84B6AB7E4FB85B10F400A5DF9419B190DBB8EA48CB62

Function 004057D0 Relevance: 15.1, APIs: 10, Instructions: 88COMMON

Download Yara Rule

APIs

cvCreateMat.CXCORE099(00000004,00000004,00000005,?,?,?,?,00000000), ref: 004057DA
cvCreateMat.CXCORE099(00000004,00000004,00000005,?,?,?,?,?,?,00000000), ref: 004057EC
cvCreateMat.CXCORE099(00000004,00000004,00000005,?,?,?,?,?,?,?,?,?,00000000), ref: 004057FE
cvCreateMat.CXCORE099(00000004,00000004,00000005,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00405810

Part of subcall function 004053A0: cvSet.CXCORE099(?,?,?,?,00000000,?,FFFFFFFE,?,00405829), ref: 004053C2

Part of subcall function 004055D0: cvCreateMat.CXCORE099(00000004,00000004,00000005,?,?,FFFFFFFE,?,?,?,00405837,?), ref: 004055E2
Part of subcall function 004055D0: cvCreateMat.CXCORE099(00000004,00000004,00000005,?,?,FFFFFFFE,?,?,?,00405837,?), ref: 004055F4
Part of subcall function 004055D0: cvGEMM.CXCORE099(?,?,?,?,?,?,?,?,?,?,?,?,?,FFFFFFFE), ref: 00405639
Part of subcall function 004055D0: cvSet.CXCORE099(?), ref: 00405662
Part of subcall function 004055D0: _CIcos.MSVCR80 ref: 004056A5
Part of subcall function 004055D0: _CIsin.MSVCR80 ref: 004056BA

Part of subcall function 00405740: cvSet.CXCORE099(?,?,?,?,00000000,?,FFFFFFFE,?,00405847), ref: 00405762

cvGEMM.CXCORE099(?,?), ref: 0040586A
cvGEMM.CXCORE099(?,?), ref: 00405895
cvReleaseMat.CXCORE099(?), ref: 004058A2
cvReleaseMat.CXCORE099(?), ref: 004058AF
cvReleaseMat.CXCORE099(?), ref: 004058BC
cvReleaseMat.CXCORE099(?), ref: 004058C9

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Create$Release$IcosIsin
String ID:
API String ID: 2101255812-0
Opcode ID: ca56298a2f5984f68f116382747911cee6aa4628ff14558b2bd9ab42edaa6797
Instruction ID: 0f02d04bed9878b01ec6eb7d24bee74ec2e50252446297c38aea4db588333580
Opcode Fuzzy Hash: ca56298a2f5984f68f116382747911cee6aa4628ff14558b2bd9ab42edaa6797
Instruction Fuzzy Hash: E5215CB0A05702ABD610FB649C4BB1BBBA0AFC4704F444D2CFA94662C1EA71D528CB97

Function 004888F0 Relevance: 15.1, APIs: 10, Instructions: 73COMMON

Download Yara Rule

APIs

?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ.MSVCP80(4FF694EA,?,?,?,?,?,?,00530C89,000000FF), ref: 00488924
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ.MSVCP80(?,?,?,?,00530C89,000000FF), ref: 00488936
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ.MSVCP80(?,?,?,?,00530C89,000000FF), ref: 00488941
?capacity@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ.MSVCP80(?,?,?,?,00530C89,000000FF), ref: 00488952
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ.MSVCP80(?,?,?,?,00530C89,000000FF), ref: 0048895D
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z.MSVCP80(00000000,00000000,?,?,?,?,00530C89,000000FF), ref: 0048897B
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z.MSVCP80(?,?,?,?,?,00530C89,000000FF), ref: 00488998
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ.MSVCP80(?,?,?,?,00530C89,000000FF), ref: 004889A8
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z.MSVCP80(00000000,00000000,?,?,?,?,00530C89,000000FF), ref: 004889B7
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z.MSVCP80(00000000,?,?,?,?,00530C89,000000FF), ref: 004889C6

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: U?$char_traits@_V?$allocator@_W@2@@std@@W@std@@$?append@?$basic_string@_V12@$?size@?$basic_string@D@2@@std@@D@std@@Myptr@?$basic_string@_U?$char_traits@V?$allocator@$??0?$basic_string@_??1?$basic_string@_?capacity@?$basic_string@_V12@@
String ID:
API String ID: 2582929383-0
Opcode ID: 99d232171a17d203477813e664fcae17ef49d5089341ea70655ec06df161d3e9
Instruction ID: cf8cf326054b3b9829f24e0287d30cae8bbcd3a7b8d77b238681494193127ac1
Opcode Fuzzy Hash: 99d232171a17d203477813e664fcae17ef49d5089341ea70655ec06df161d3e9
Instruction Fuzzy Hash: 62316F75900118EFDB04EF64D844AADBBB6FF98350F00852AF91697390DB349D45CF84

Function 004013A0 Relevance: 14.3, APIs: 3, Strings: 5, Instructions: 261COMMON

Download Yara Rule

APIs

cvCvtColor.CV099(?,?,00000007), ref: 0040147C
cvError.CXCORE099(000000FB,cvCylInitModel,Invalid input frame.,.\src\cyltracker.cpp,00000126), ref: 00401675

Strings

.\src\cyltracker.cpp, xrefs: 004013BD, 00401653, 00401664
Invalid model parameters were specified., xrefs: 00401658
cvCylInitModel, xrefs: 0040166E
Null pointer to tracker context., xrefs: 004013C2
Invalid input frame., xrefs: 00401669

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: ColorError
String ID: .\src\cyltracker.cpp$Invalid input frame.$Invalid model parameters were specified.$Null pointer to tracker context.$cvCylInitModel
API String ID: 4088650746-2904168572
Opcode ID: 839d2cbad712c6fb12a95abb139124923537f8022364e14e69f8706239253386
Instruction ID: 1c253823393e59d8f389e9ec3cb6c3af1bef9396372c058acdeb4534553bb085
Opcode Fuzzy Hash: 839d2cbad712c6fb12a95abb139124923537f8022364e14e69f8706239253386
Instruction Fuzzy Hash: 0D81E5B2F04202ABC7027E50D9457DA7BA4FB80794F214E99E9DA711F5F33588718EC9

Function 004F1030 Relevance: 14.2, APIs: 7, Strings: 1, Instructions: 220COMMON

Download Yara Rule

APIs

fseek.MSVCR80 ref: 004F1097
ftell.MSVCR80 ref: 004F10A4
fseek.MSVCR80 ref: 004F10B8

Strings

zS, xrefs: 004F1236, 004F123E, 004F1242, 004F11A1, 004F11A8, 004F11D3, 004F11DD, 004F11E1, 004F11A7, 004F11AB, 004F11E0, 004F11E4, 004F1241, 004F1245

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: fseek$ftell
String ID: zS
API String ID: 1687442226-3280143790
Opcode ID: e640e00341aeb39dc5ad3ada3b11ef7366c8acaf58e60699a3a6dc06e33046a1
Instruction ID: d51d2314559d3de73f7ebb59d383f0640d42414dd441d265d43309b2b2205bb6
Opcode Fuzzy Hash: e640e00341aeb39dc5ad3ada3b11ef7366c8acaf58e60699a3a6dc06e33046a1
Instruction Fuzzy Hash: 409126B1E00249ABDB04DFD4DC92BFFBB71BF44300F10455AE611AB291DB796901CB99

Function 004D1BE0 Relevance: 14.2, APIs: 6, Strings: 2, Instructions: 215COMMON

Download Yara Rule

APIs

Part of subcall function 00438A10: clock.MSVCR80 ref: 00438AA7
Part of subcall function 00438A10: _DebugHeapAllocator.LIBCPMTD ref: 00438AC5

Concurrency::cancellation_token_source::~cancellation_token_source.LIBCPMTD ref: 004D1D02
Concurrency::cancellation_token_source::~cancellation_token_source.LIBCPMTD ref: 004D1D45

Part of subcall function 00438AF0: clock.MSVCR80 ref: 00438B1F

Strings

CPlayList::ActivatePlayList (%s), xrefs: 004D1C12
Couldn't activate item., xrefs: 004D1E4F

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Concurrency::cancellation_token_source::~cancellation_token_sourceclock$AllocatorDebugHeap
String ID: CPlayList::ActivatePlayList (%s)$Couldn't activate item.
API String ID: 666216686-3135489573
Opcode ID: 86a6ea1d549f1e14cb2df91f30b70f8bdc6fa07100872fae78ce2dc3a5dbc7fd
Instruction ID: e5225bd3be3d0e3e30ba9f0653f38cf39164d32131126bfff1481db119ea4a1f
Opcode Fuzzy Hash: 86a6ea1d549f1e14cb2df91f30b70f8bdc6fa07100872fae78ce2dc3a5dbc7fd
Instruction Fuzzy Hash: 02A1E770D00208DFDB14DFA9C995BEDBBB1BF09318F20815EE4196B392DB786A45CB94

Function 004B2740 Relevance: 14.2, APIs: 6, Strings: 2, Instructions: 210memoryCOMMON

Download Yara Rule

APIs

CoTaskMemFree.OLE32(00000000,00000000), ref: 004B2816
_DebugHeapAllocator.LIBCPMTD ref: 004B280A

Part of subcall function 004167C0: _DebugHeapAllocator.LIBCPMTD ref: 004167CE

_DebugHeapAllocator.LIBCPMTD ref: 004B284D
_DebugHeapAllocator.LIBCPMTD ref: 004B287B
_DebugHeapAllocator.LIBCPMTD ref: 004B2926
_DebugHeapAllocator.LIBCPMTD ref: 004B2938

Strings

- PIN Id=%s Name=%s Dir=%s ConnectedTo=%s (%s), xrefs: 004B29AF
ConnectionMediaType:, xrefs: 004B29CD

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$FreeTask
String ID: - PIN Id=%s Name=%s Dir=%s ConnectedTo=%s (%s)$ConnectionMediaType:
API String ID: 2977454536-3767152877
Opcode ID: 7365bd653b06ff7014c07b105e705209bc8ea7cbefe77dba3365ebff6c9963ec
Instruction ID: 9de56078743278097fdae2ef512013b449c6826a7b1472736913757348bad0bc
Opcode Fuzzy Hash: 7365bd653b06ff7014c07b105e705209bc8ea7cbefe77dba3365ebff6c9963ec
Instruction Fuzzy Hash: 77A114719041189FCB29EB65CD84BDEB7B4AF49304F5081DAE00AA7291DB746F88CFA4

Function 00BA1C60 Relevance: 14.2, APIs: 6, Strings: 2, Instructions: 177COMMON

Download Yara Rule

APIs

memset.MSVCR80 ref: 00BA1D14
AVIFileCreateStreamA.AVIFIL32(?,?,vids), ref: 00BA1DCD
AVISaveOptions.AVIFIL32(00000000,00000000,00000001,?,?,?,?,vids), ref: 00BA1E52
AVIMakeCompressedStream.AVIFIL32(?,?,?,00000000,?,?,vids), ref: 00BA1E69
AVIStreamSetFormat.AVIFIL32(?,00000000,?,00000428,?,?,?,00000000,?,?,vids), ref: 00BA1E94
cvCreateImage.CXCORE099(?,?,00000008,?,?,00000000,?,00000428,?,?,?,00000000,?,?,vids), ref: 00BA1EC7

Strings

vids, xrefs: 00BA1D9A, 00BA1DA1
vids, xrefs: 00BA1E0E

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Stream$Create$CompressedFileFormatImageMakeOptionsSavememset
String ID: vids$vids
API String ID: 1290796960-2916420342
Opcode ID: c426ac39cfee8d74bad2b2cd5706993bcaf33d169efbd7a1c3d1641064347d5d
Instruction ID: 35ed5290b7fb8ca4e2bc18ace36f9225152c06a941eb256125646695036daac3
Opcode Fuzzy Hash: c426ac39cfee8d74bad2b2cd5706993bcaf33d169efbd7a1c3d1641064347d5d
Instruction Fuzzy Hash: C0718DB05087859FC760DF29D880AABBBE9FF85355F104D6DF98883291E7349944CF52

Function 00BC8CB0 Relevance: 14.2, APIs: 4, Strings: 4, Instructions: 156COMMON

Download Yara Rule

APIs

_setjmp3.MSVCR80 ref: 00BC8CF5

Strings

Application is running with png.c from libpng-%.20s, xrefs: 00BC8DD4
Incompatible libpng version in application and library, xrefs: 00BC8DE6
Application was compiled with png.h from libpng-%.20s, xrefs: 00BC8DB7
1.2.8, xrefs: 00BC8D57, 00BC8D84, 00BC8DCC

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: _setjmp3
String ID: 1.2.8$Application is running with png.c from libpng-%.20s$Application was compiled with png.h from libpng-%.20s$Incompatible libpng version in application and library
API String ID: 3837033383-821774253
Opcode ID: 7ca22a7c47be58868e02c994f1961f96ae33ae301fc94d55a94573a7680a0523
Instruction ID: 5853b8c3374f9b6278346020acfe2cfa92be48da0aafead51526078a5b63a3a6
Opcode Fuzzy Hash: 7ca22a7c47be58868e02c994f1961f96ae33ae301fc94d55a94573a7680a0523
Instruction Fuzzy Hash: 1C41FE72A403487BE720AB649C42FEF77E9DF95700F1044ADF98997282DB70AD0187A5

Function 004B91B0 Relevance: 14.2, APIs: 6, Strings: 2, Instructions: 152memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 00438A10: clock.MSVCR80 ref: 00438AA7
Part of subcall function 00438A10: _DebugHeapAllocator.LIBCPMTD ref: 00438AC5

_DebugHeapAllocator.LIBCPMTD ref: 004B91FE

Part of subcall function 004167C0: _DebugHeapAllocator.LIBCPMTD ref: 004167CE

Concurrency::details::_CriticalNonReentrantLock::_Scoped_lock::_Scoped_lock.LIBCMTD ref: 004B921B
_DebugHeapAllocator.LIBCPMTD ref: 004B9286
_DebugHeapAllocator.LIBCPMTD ref: 004B9292
Concurrency::details::_CriticalNonReentrantLock::_Scoped_lock::_Scoped_lock.LIBCMTD ref: 004B9346
_DebugHeapAllocator.LIBCPMTD ref: 004B937C

Part of subcall function 00438AF0: clock.MSVCR80 ref: 00438B1F

Strings

CManyCamGraphMgr::AddFileInput, xrefs: 004B91DF
FILE%d, xrefs: 004B9262

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$Concurrency::details::_CriticalLock::_ReentrantScoped_lockScoped_lock::_clock
String ID: CManyCamGraphMgr::AddFileInput$FILE%d
API String ID: 2060279746-2550898069
Opcode ID: 554f504c3c04030db831f41dac86bb6fd15d60918f1d20abac47e38e3ad480d2
Instruction ID: f87271521a58759e14b5fc00be8376ac9ef0cf63084c1a11c79c4c9345c79b8d
Opcode Fuzzy Hash: 554f504c3c04030db831f41dac86bb6fd15d60918f1d20abac47e38e3ad480d2
Instruction Fuzzy Hash: 97616D70901248EFCB04EF95C995BDEBBB4BF14308F10856EF4166B2D2DB786A09CB95

Function 00BDC9B0 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 64windowmemoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000000,?), ref: 00BDC9F6
sprintf.MSVCR80 ref: 00BDCA09
vsprintf.MSVCR80 ref: 00BDCA26
GetFocus.USER32 ref: 00BDCA33
MessageBoxA.USER32(00000000), ref: 00BDCA3A
LocalFree.KERNEL32(00000000), ref: 00BDCA41

Strings

%s Warning, xrefs: 00BDC9DD, 00BDCA03
LIBTIFF, xrefs: 00BDC9BC

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Local$AllocFocusFreeMessagesprintfvsprintf
String ID: %s Warning$LIBTIFF
API String ID: 663082726-3418978845
Opcode ID: 8170b26e9f5e68d675037d6b9f7b17c9b0828a507154fce8b59f18edcdeee83a
Instruction ID: 1bcbc073ff3d1b876964c240f55538bf61c6e73038ccb414b974401ea7ad88bd
Opcode Fuzzy Hash: 8170b26e9f5e68d675037d6b9f7b17c9b0828a507154fce8b59f18edcdeee83a
Instruction Fuzzy Hash: 461148362015046BC20847748C88D7B3FD8EF85372F14031DF62AD75D2DEA2DC014265

Function 00BDCA50 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 64windowmemoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000000,?), ref: 00BDCA96
sprintf.MSVCR80 ref: 00BDCAA9
vsprintf.MSVCR80 ref: 00BDCAC6
GetFocus.USER32 ref: 00BDCAD3
MessageBoxA.USER32(00000000), ref: 00BDCADA
LocalFree.KERNEL32(00000000), ref: 00BDCAE1

Strings

%s Error, xrefs: 00BDCA7D, 00BDCAA3
LIBTIFF, xrefs: 00BDCA5C

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Local$AllocFocusFreeMessagesprintfvsprintf
String ID: %s Error$LIBTIFF
API String ID: 663082726-2650228428
Opcode ID: 8cc77470da054fc5cad33dd5d86650f681b572ffd059d6d76e9e280a157c9ed9
Instruction ID: 0518e80863a6aeebd08b655e735f7721155265c6dbe148324680a9a85a3d6f90
Opcode Fuzzy Hash: 8cc77470da054fc5cad33dd5d86650f681b572ffd059d6d76e9e280a157c9ed9
Instruction Fuzzy Hash: 6E1148362015046BC30847788C88D7B7BD8EF89372F14031DF626D75D2DFA5CD0142A1

Function 00BD0940 Relevance: 13.7, APIs: 1, Strings: 8, Instructions: 185COMMON

Download Yara Rule

Strings

keyword length must be 1 - 79 characters, xrefs: 00BD0AD0
zero length keyword, xrefs: 00BD0AFB
leading spaces removed from keyword, xrefs: 00BD0A36
Out of memory while procesing keyword, xrefs: 00BD0990
extra interior spaces removed from keyword, xrefs: 00BD0A96
Zero length keyword, xrefs: 00BD0AB1
trailing spaces removed from keyword, xrefs: 00BD0A0F
invalid keyword character 0x%02X, xrefs: 00BD09D0

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID: Out of memory while procesing keyword$Zero length keyword$extra interior spaces removed from keyword$invalid keyword character 0x%02X$keyword length must be 1 - 79 characters$leading spaces removed from keyword$trailing spaces removed from keyword$zero length keyword
API String ID: 0-1527206911
Opcode ID: 726554466828e7f5bf78f5b51250f1d945f37b1b27e1a1a20f299f16dd17b3b2
Instruction ID: de6bab56d6fb957aae39f224398462c626d216dc167e5824ca979427c87b617f
Opcode Fuzzy Hash: 726554466828e7f5bf78f5b51250f1d945f37b1b27e1a1a20f299f16dd17b3b2
Instruction Fuzzy Hash: DA518F665183494BD724BE289C82B7AFBE5DF97305F4404DEE9C447343F766884B83A2

Function 004055D0 Relevance: 13.6, APIs: 9, Instructions: 127COMMON

Download Yara Rule

APIs

cvCreateMat.CXCORE099(00000004,00000004,00000005,?,?,FFFFFFFE,?,?,?,00405837,?), ref: 004055E2
cvCreateMat.CXCORE099(00000004,00000004,00000005,?,?,FFFFFFFE,?,?,?,00405837,?), ref: 004055F4

Part of subcall function 00405430: cvSet.CXCORE099(?,?,?,?,?,?,?,00000000,?,?,00405609,00000000,?,?,?,?), ref: 00405455
Part of subcall function 00405430: _CIcos.MSVCR80 ref: 004054AB
Part of subcall function 00405430: _CIsin.MSVCR80 ref: 004054C0

Part of subcall function 00405430: _CIcos.MSVCR80 ref: 00405513
Part of subcall function 00405430: _CIsin.MSVCR80 ref: 00405528

cvGEMM.CXCORE099(?,?,?,?,?,?,?,?,?,?,?,?,?,FFFFFFFE), ref: 00405639
cvSet.CXCORE099(?), ref: 00405662
_CIcos.MSVCR80 ref: 004056A5
_CIsin.MSVCR80 ref: 004056BA
cvGEMM.CXCORE099(?,?), ref: 00405714
cvReleaseMat.CXCORE099(?), ref: 00405721
cvReleaseMat.CXCORE099(?), ref: 0040572E

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: IcosIsin$CreateRelease
String ID:
API String ID: 2556766011-0
Opcode ID: 19b278f26bd2affd4bf5088c6fcf34e39657aa1821ccb0a828da2a4a6fc568fd
Instruction ID: f31050a243995d0c5443df83b4ae895e9b552899debfb7c8d2f859130b8e0e61
Opcode Fuzzy Hash: 19b278f26bd2affd4bf5088c6fcf34e39657aa1821ccb0a828da2a4a6fc568fd
Instruction Fuzzy Hash: 8F416AB0A05701DBD310EF24E98AA1ABBB0FF84704F814D98F5D557296DB31E839CB96

Function 004A7F40 Relevance: 13.6, APIs: 9, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Delete
String ID:
API String ID: 1035893169-0
Opcode ID: 027381e0a8d9cc06f36ac8957b2692d02a27fb112fce139c5847b74b9e663b06
Instruction ID: 84041e226b1c2fd87843b1158a64503d8b67fa0500779cb20a2bc36cc8881071
Opcode Fuzzy Hash: 027381e0a8d9cc06f36ac8957b2692d02a27fb112fce139c5847b74b9e663b06
Instruction Fuzzy Hash: 8D512FB0914209ABEB04EFA4CD56FEEBB74AF14314F20412AF511772D1DB786E44CB69

Function 00403140 Relevance: 13.6, APIs: 9, Instructions: 124COMMON

Download Yara Rule

APIs

Part of subcall function 00402BB0: cvCreateImage.CXCORE099(?,?,00000008,00000001,?,?,00403181,?,?), ref: 00402BC0
Part of subcall function 00402BB0: cvCreateImage.CXCORE099(?,?,00000008,00000001,?,00000000,?,00000000,?,0040120F), ref: 00402BD4
Part of subcall function 00402BB0: cvCreateImage.CXCORE099(?,?,00000020,00000003,?,?,?,?,?,00000000,?,00000000,?,0040120F), ref: 00402BE9
Part of subcall function 00402BB0: cvReleaseImage.CXCORE099(?,?,?,?,?,?,00000000,?,00000000,?,0040120F), ref: 00402BFE
Part of subcall function 00402BB0: cvReleaseImage.CXCORE099(?,?,00000000,?,00000000,?,0040120F), ref: 00402C10
Part of subcall function 00402BB0: cvReleaseImage.CXCORE099(?,?,00000000,?,00000000,?,0040120F), ref: 00402C22

cvCreateImage.CXCORE099(?,?,00000008,00000001,?,00000000,?,0040120F), ref: 00403198
cvCreateImage.CXCORE099(?,?,80000010,00000001,?,00000000,?,0040120F), ref: 004031AF
cvCreateImage.CXCORE099(?,?,80000010,00000001,?,?,?,?,?,00000000,?,0040120F), ref: 004031C7
cvReleaseImage.CXCORE099(00000000,?,00000000,?,0040120F), ref: 0040321A
cvReleaseImage.CXCORE099(00000004,?,00000000,?,0040120F), ref: 0040322C
cvReleaseImage.CXCORE099(-00000008,?,00000000,?,0040120F), ref: 0040323D
cvReleaseImage.CXCORE099(?,?,00000000,?,0040120F), ref: 00403253
cvReleaseImage.CXCORE099(00000000,?,00000000,?,0040120F), ref: 00403265
cvReleaseImage.CXCORE099(?,?,00000000,?,0040120F), ref: 00403276

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Image$Release$Create
String ID:
API String ID: 810653722-0
Opcode ID: 1d98beb3a53aab4c12813adeeefc3e19331db0e6fab2847f039cf9fe8a11b982
Instruction ID: 1a79d18011980f8bb9dda7d5d5bd7389d244d0d6aefedc31b6f3b3b2419f781a
Opcode Fuzzy Hash: 1d98beb3a53aab4c12813adeeefc3e19331db0e6fab2847f039cf9fe8a11b982
Instruction Fuzzy Hash: 0031FAB5901202ABEB109E24DC45B57BB9CFF55302F08447AE904A33C1F379FA59C6A6

Function 004887A0 Relevance: 13.6, APIs: 9, Instructions: 70COMMON

Download Yara Rule

APIs

?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z.MSVCP80(00000000,4FF694EA,4FF694EA,?,?,00488794,4FF694EA,0049A100,0049A100), ref: 004887D9
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ.MSVCP80(4FF694EA,?,?,00488794,4FF694EA,0049A100,0049A100), ref: 004887E7
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ.MSVCP80(?,00488794,4FF694EA,0049A100,0049A100), ref: 004887F5
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ.MSVCP80(?,00488794,4FF694EA,0049A100,0049A100), ref: 00488800
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ.MSVCP80(?,?,00488794,4FF694EA,0049A100,0049A100), ref: 00488819
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z.MSVCP80(?,00000000,?,?,00488794,4FF694EA,0049A100,0049A100), ref: 0048882E
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z.MSVCP80(?,?,?,00488794,4FF694EA,0049A100,0049A100), ref: 0048884B
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ.MSVCP80(?,?,00488794,4FF694EA,0049A100,0049A100), ref: 0048885B

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: U?$char_traits@_V?$allocator@_W@2@@std@@W@std@@$Myptr@?$basic_string@_$V12@$??1?$basic_string@_??4?$basic_string@_?erase@?$basic_string@_?size@?$basic_string@?substr@?$basic_string@_D@2@@std@@D@std@@U?$char_traits@V01@V01@@V?$allocator@
String ID:
API String ID: 731949045-0
Opcode ID: 2f69720e727eced4ed2275371a078fe7476b196afe62a487cd70bae6314d5383
Instruction ID: 4406f9edcf3e418624fedf0353d0674b6ffa21746b1b988d8d39eeb2d4d24482
Opcode Fuzzy Hash: 2f69720e727eced4ed2275371a078fe7476b196afe62a487cd70bae6314d5383
Instruction Fuzzy Hash: 5C314D31900108EFDB04EF59E898A9DBBB6FB98350F40C52AF91A973A0DB30A944DF54

Function 00BA1670 Relevance: 13.6, APIs: 9, Instructions: 68windowCOMMON

Download Yara Rule

APIs

IsWindow.USER32(?), ref: 00BA1694
SendMessageA.USER32(?,00000405,00000000,00000000), ref: 00BA16AB
IsWindow.USER32(?), ref: 00BA16B1
SendMessageA.USER32(?,0000040B,00000000,00000000), ref: 00BA16C2
DestroyWindow.USER32(?), ref: 00BA16C8
cvReleaseImage.CXCORE099(?), ref: 00BA16D2
ICSendMessage.MSVFW32(?,0000400E,00000000,00000000), ref: 00BA16E9
ICClose.MSVFW32(?,?,0000400E,00000000,00000000), ref: 00BA16F2
memset.MSVCR80 ref: 00BA170C

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: MessageSendWindow$CloseDestroyImageReleasememset
String ID:
API String ID: 1564840505-0
Opcode ID: 13a449b38805965cc80a3a6320194ccf5bf1ad2bcf4f65759f151da69cfe5ca9
Instruction ID: 3e8c1e9dead55fbd209ef97bfd0f33c93d2ed7433d7dbd14e3b516a678799b3d
Opcode Fuzzy Hash: 13a449b38805965cc80a3a6320194ccf5bf1ad2bcf4f65759f151da69cfe5ca9
Instruction Fuzzy Hash: F91142B25107496BC260AFAADE80D17B7ECFF45744B455C4DF34697951C772F8008B64

Function 004B14B0 Relevance: 12.6, APIs: 5, Strings: 2, Instructions: 372COMMON

Download Yara Rule

APIs

Part of subcall function 00438A10: clock.MSVCR80 ref: 00438AA7
Part of subcall function 00438A10: _DebugHeapAllocator.LIBCPMTD ref: 00438AC5

_Smanip.LIBCPMTD ref: 004B152C

Part of subcall function 00438AF0: clock.MSVCR80 ref: 00438B1F

Strings

vids, xrefs: 004B16FD, 004B1811
CGraphMgr::AdjustCameraResolution (size=%dx%d), xrefs: 004B14E9

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: clock$AllocatorDebugHeapSmanip
String ID: CGraphMgr::AdjustCameraResolution (size=%dx%d)$vids
API String ID: 3240802707-243107872
Opcode ID: 0b9f26486d5ca748ff65b87eaf69692d820365cf5d3d260ad1582382175653d3
Instruction ID: a989dfa4e85d0b56287cfe2e867778c486b3f31bfd173d30f9afd811cc483807
Opcode Fuzzy Hash: 0b9f26486d5ca748ff65b87eaf69692d820365cf5d3d260ad1582382175653d3
Instruction Fuzzy Hash: D7021671900218DFCB14DF69C991BEEBBB0BF48304F50819EE519A7291DB34AE85CFA5

Function 00BE3E90 Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 213COMMON

Download Yara Rule

APIs

Part of subcall function 00BDC870: GlobalAlloc.KERNEL32(00000000,00000000,00BDFB2A,00BE084E,?,?,?,00BE084E,?,?,00000000,?), ref: 00BDC877

_ftol.MSVCR80 ref: 00BE3F28

Strings

No space to write array, xrefs: 00BE3EDA

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: AllocGlobal_ftol
String ID: No space to write array
API String ID: 2648542381-3993372183
Opcode ID: 17e8bcf6f151b33d6a492eb71862bf0b5115f280c0f94066fa6919b382da5a2d
Instruction ID: bb588fb26d398124011a8407d75c5c4a87836ca8bd1818877ff2e8248854b694
Opcode Fuzzy Hash: 17e8bcf6f151b33d6a492eb71862bf0b5115f280c0f94066fa6919b382da5a2d
Instruction Fuzzy Hash: 9B619AB590428A8BC710DF16D88196BB7E4FFC8744F1049AAF9558B302D735DD19C7E2

Function 004C9210 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 169COMMON

Download Yara Rule

APIs

Part of subcall function 00438A10: clock.MSVCR80 ref: 00438AA7
Part of subcall function 00438A10: _DebugHeapAllocator.LIBCPMTD ref: 00438AC5

CreateEventW.KERNEL32(00000000,00000000,00000000,00000000,?,?,4FF694EA), ref: 004C928B
CloseHandle.KERNEL32(?,?,?,?,?,4FF694EA), ref: 004C93D8
cvReleaseImage.CXCORE099(00000000,?,?,?,?,4FF694EA), ref: 004C93E8

Strings

CManyCamModel::GetPosterFrame, xrefs: 004C923F

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorCloseCreateDebugEventHandleHeapImageReleaseclock
String ID: CManyCamModel::GetPosterFrame
API String ID: 3295495820-604892226
Opcode ID: 0fb0d1f75a3f7064816a10a7a659a458f82e48bfb0f7d40fede8694d07b98b13
Instruction ID: b7f4d3075c697768d86108b177f770b28cc6e89c2576a85e707f138266713341
Opcode Fuzzy Hash: 0fb0d1f75a3f7064816a10a7a659a458f82e48bfb0f7d40fede8694d07b98b13
Instruction Fuzzy Hash: 81717C70D01208DFDB04EFE4C895BEEBBB4BF58304F20815DE505AB291DB786A45CBA5

Function 00BD0470 Relevance: 12.4, APIs: 1, Strings: 6, Instructions: 129COMMON

Download Yara Rule

APIs

fprintf.MSVCR80 ref: 00BD0609

Strings

Invalid fixed cHRM green point specified, xrefs: 00BD05BD
cHRM, xrefs: 00BD058D
Invalid fixed cHRM blue point specified, xrefs: 00BD05A5
white_x=%ld, white_y=%ld, xrefs: 00BD0603
Invalid fixed cHRM white point specified, xrefs: 00BD05ED
Invalid cHRM fixed red point specified, xrefs: 00BD05D5

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: fprintf
String ID: Invalid cHRM fixed red point specified$Invalid fixed cHRM blue point specified$Invalid fixed cHRM green point specified$Invalid fixed cHRM white point specified$cHRM$white_x=%ld, white_y=%ld
API String ID: 383729395-227365660
Opcode ID: db8e70c5bf801fff09bb32a8e92177c280c81332e85eb844236e8e0d57177cd9
Instruction ID: f977d6907183668f549c8b6b98c7ff7b6a195fad56c8b80c4d023bdf7458ffc9
Opcode Fuzzy Hash: db8e70c5bf801fff09bb32a8e92177c280c81332e85eb844236e8e0d57177cd9
Instruction Fuzzy Hash: 3441D4765003116BC208E764DCC5DBFB3E9EFD4318F8048DDF99857211E664EA8887A2

Function 00BDC750 Relevance: 12.4, APIs: 3, Strings: 4, Instructions: 122fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32(?,-80000000,00000001,00000000,00000002,00000001,00000000), ref: 00BDC7C9
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 00BDC803
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 00BDC840

Strings

TIFFOpenW, xrefs: 00BDC758, 00BDC7DE, 00BDC81F
<unknown>, xrefs: 00BDC846, 00BDC854
%S: Cannot open, xrefs: 00BDC7D9
Can't allocate space for filename conversion buffer, xrefs: 00BDC81A

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: ByteCharMultiWide$CreateFile
String ID: %S: Cannot open$<unknown>$Can't allocate space for filename conversion buffer$TIFFOpenW
API String ID: 472006099-3993974821
Opcode ID: bc670607eb7e20defc818645f8ec566a619d63266a23900f9520f5307b2e85ff
Instruction ID: 69394df30b5ce86a9ba9e9cbdea9749d22f4fc3fc00911b86adf86bcfdb72675
Opcode Fuzzy Hash: bc670607eb7e20defc818645f8ec566a619d63266a23900f9520f5307b2e85ff
Instruction Fuzzy Hash: C53125A674121226E6241579AC8AF7BAECDCBC1771F2406B7F205E63D1FA558C04C2B2

Function 0050E6A0 Relevance: 12.4, APIs: 8, Instructions: 361memoryCOMMON

Download Yara Rule

APIs

_DebugHeapAllocator.LIBCPMTD ref: 0050E7D1
memset.MSVCR80 ref: 0050E7E8

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeapmemset
String ID:
API String ID: 622753528-0
Opcode ID: 2c09cb3bd4d98cd5ac2316cddb9aa19e67c7f66a0578b6bf1a6e020fd8d26f0b
Instruction ID: 15c03739bf2cff661cf5d104c6130bcee5a7d3e6e4c58e74d1621743953f5b5e
Opcode Fuzzy Hash: 2c09cb3bd4d98cd5ac2316cddb9aa19e67c7f66a0578b6bf1a6e020fd8d26f0b
Instruction Fuzzy Hash: 81F17A719022199BDB28EB10CD9ABEEBBB4BF54304F1085E9E40A671D1DB745F88CF91

Function 004CB0F0 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 97memoryCOMMON

Download Yara Rule

APIs

_DebugHeapAllocator.LIBCPMTD ref: 004CB139
_DebugHeapAllocator.LIBCPMTD ref: 004CB155
_DebugHeapAllocator.LIBCPMTD ref: 004CB171

Part of subcall function 004DA970: _DebugHeapAllocator.LIBCPMTD ref: 004DAA07
Part of subcall function 004DA970: _DebugHeapAllocator.LIBCPMTD ref: 004DAA16
Part of subcall function 004DA970: _DebugHeapAllocator.LIBCPMTD ref: 004DAA37

_DebugHeapAllocator.LIBCPMTD ref: 004CB1A3
_DebugHeapAllocator.LIBCPMTD ref: 004CB1D6

Strings

ZP, xrefs: 004CB11F, 004CB122
|LV, xrefs: 004CB151, 004CB1EB, 004CB154

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap
String ID: |LV$ZP
API String ID: 571936431-1538846667
Opcode ID: 8217c67bd42f6a567db927a5321e70c2cba3473b1a658e23f040ac260a6cc460
Instruction ID: 978cc442b74b90625ce9c3af39009df7ee77075ce9d9cefa9296828956acecd6
Opcode Fuzzy Hash: 8217c67bd42f6a567db927a5321e70c2cba3473b1a658e23f040ac260a6cc460
Instruction Fuzzy Hash: 27410AB1D05248EFCB04DFA8D991BDEBBF5BB48304F10815EF815A7281D778AA04CBA5

Function 00BAABC0 Relevance: 12.3, APIs: 8, Instructions: 333COMMON

Download Yara Rule

APIs

??2@YAPAXI@Z.MSVCR80(?), ref: 00BAAC7E
??2@YAPAXI@Z.MSVCR80(?), ref: 00BAAC9A
??2@YAPAXI@Z.MSVCR80(?), ref: 00BAACB4
_setjmp3.MSVCR80 ref: 00BAAD39

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: ??2@$_setjmp3
String ID:
API String ID: 4193736177-0
Opcode ID: 1fad4519a10a464c6469b43fd3a1db5303f634f55f85f10867927a3896eab978
Instruction ID: 14daa4914d7ab56f05e2e300ee5d8572e27fadb9bf37377645f40a5d6548f8c7
Opcode Fuzzy Hash: 1fad4519a10a464c6469b43fd3a1db5303f634f55f85f10867927a3896eab978
Instruction Fuzzy Hash: 10D180B19083489FDB34DF24CC85BEA77E9EB45304F248569F869C7252E731E944CB62

Function 004825C0 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 75librarywindowCOMMON

Download Yara Rule

APIs

LoadCursorW.USER32(00000000,00007F89), ref: 00482602
GetWindowsDirectoryW.KERNEL32(00000000,00000104,00000104,?,0049A100,4FF694EA,?), ref: 00482644
LoadLibraryW.KERNEL32(00000000,\winhlp32.exe,000000FF,?,0049A100,4FF694EA,?), ref: 0048266A
LoadCursorW.USER32(00000000,0000006A), ref: 0048267F
CopyIcon.USER32(?), ref: 00482692
FreeLibrary.KERNEL32(00000000), ref: 004826A5

Strings

\winhlp32.exe, xrefs: 00482654

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Load$CursorLibrary$CopyDirectoryFreeIconWindows
String ID: \winhlp32.exe
API String ID: 501009500-695620452
Opcode ID: 72d25b9e93f0e45ffb332d077584a673b3d5e48780a8d95c32651a89c6593934
Instruction ID: ec6d5bdbcb5f979a409084d156352cb5eef125df936233655878cf5ad0338882
Opcode Fuzzy Hash: 72d25b9e93f0e45ffb332d077584a673b3d5e48780a8d95c32651a89c6593934
Instruction Fuzzy Hash: 0D313A71D00208AFDB04EFA4E959BEDBBB5FB18314F50462AF916A72D0DB786948CB14

Function 00BCB610 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 57COMMON

Download Yara Rule

APIs

fprintf.MSVCR80 ref: 00BCB663
fprintf.MSVCR80 ref: 00BCB67F
fprintf.MSVCR80 ref: 00BCB699
longjmp.MSVCR80(?,00000001,?,?,?,?,?,?,?,?,?,?,Out of Memory!,?), ref: 00BCB6A9

Strings

libpng error no. %s: %s, xrefs: 00BCB65D
libpng error: %s, offset=%d, xrefs: 00BCB679
libpng error: %s, xrefs: 00BCB693

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: fprintf$longjmp
String ID: libpng error no. %s: %s$libpng error: %s$libpng error: %s, offset=%d
API String ID: 1832846611-3377054135
Opcode ID: 0dfaa41f3fda9a314ade07b8b2e9563eb209b68a7c8d861508d59c71e765501d
Instruction ID: 6c9cbbd816d81302841832da8df45a3b46a2eed182ac3e8d87caef1444bcb459
Opcode Fuzzy Hash: 0dfaa41f3fda9a314ade07b8b2e9563eb209b68a7c8d861508d59c71e765501d
Instruction Fuzzy Hash: 5A11E9716042816BD3105B28DC9AFBEBBE9DB82304F14459DF481EB2A2DB76D849C752

Function 00BBF220 Relevance: 12.3, APIs: 8, Instructions: 298COMMON

Download Yara Rule

APIs

_ftol.MSVCR80 ref: 00BBF559
_ftol.MSVCR80 ref: 00BBF576
_ftol.MSVCR80 ref: 00BBF592
_ftol.MSVCR80 ref: 00BBF5AC
_ftol.MSVCR80 ref: 00BBF5CA
_ftol.MSVCR80 ref: 00BBF5E8
_ftol.MSVCR80 ref: 00BBF604
_ftol.MSVCR80 ref: 00BBF61E

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: _ftol
String ID:
API String ID: 2545261903-0
Opcode ID: edb3e30e1849aec427337aa1de11fee622972135a2a4b6055f9f6f6fcd746f94
Instruction ID: e5e4416c63e2f9ecb884648c873aaeec76619192ceea19d85949c1cb34bfcf34
Opcode Fuzzy Hash: edb3e30e1849aec427337aa1de11fee622972135a2a4b6055f9f6f6fcd746f94
Instruction Fuzzy Hash: 09D13872909342DFD3029F21D48916ABFB0FFD5344F964A98E0D52616AE330C579CB87

Function 004042F0 Relevance: 12.1, APIs: 8, Instructions: 101COMMON

Download Yara Rule

APIs

cvCopy.CXCORE099(?,?,00000000,?,?,?,FFFFFFFE,?,?,?,?,00401620), ref: 00404309
cvInvert.CXCORE099(?,?,00000000,?,?,FFFFFFFE,?,?,?,?,00401620), ref: 00404321
cvGEMM.CXCORE099(?,?,?,?,?,00000000,?,?,?,?,?,FFFFFFFE), ref: 0040436B

Part of subcall function 00403550: cvResetImageROI.CXCORE099(?,?,FFFFFFFE), ref: 004035F7
Part of subcall function 00403550: cvResetImageROI.CXCORE099(?,FFFFFFFE), ref: 00403603
Part of subcall function 00403550: cvResetImageROI.CXCORE099(?,?,FFFFFFFE), ref: 0040360F
Part of subcall function 00403550: cvSet.CXCORE099(?), ref: 00403636
Part of subcall function 00403550: cvSet.CXCORE099(?), ref: 0040365D

cvSetImageROI.CXCORE099(?), ref: 004043B7
cvSetImageROI.CXCORE099(?), ref: 004043D9
cvCopy.CXCORE099(?,?,00000000), ref: 004043E5
cvResetImageROI.CXCORE099(?), ref: 004043EE
cvResetImageROI.CXCORE099(?), ref: 004043F7

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Image$Reset$Copy$Invert
String ID:
API String ID: 2642547888-0
Opcode ID: e93eb0512fcc8a041c5aa665e6f27bd66d5727e802e950380074bd07c4e28349
Instruction ID: 4832167a604e7eee410914a1b349f3b52c2c1ab0660e6587da0ebae9eec7833f
Opcode Fuzzy Hash: e93eb0512fcc8a041c5aa665e6f27bd66d5727e802e950380074bd07c4e28349
Instruction Fuzzy Hash: 5B3153F4A007009FC314EF14D886F57BBE4AF89710F04896DE98A57381D635E9158BA6

Function 004012F0 Relevance: 12.1, APIs: 8, Instructions: 56COMMON

Download Yara Rule

APIs

Part of subcall function 00402EC0: cvReleaseMat.CXCORE099(00000118,?), ref: 00402ED9
Part of subcall function 00402EC0: cvReleaseMat.CXCORE099(00000114), ref: 00402EEB
Part of subcall function 00402EC0: cvReleaseMat.CXCORE099(0000011C), ref: 00402EFD
Part of subcall function 00402EC0: cvReleaseMat.CXCORE099(00000120), ref: 00402F0F
Part of subcall function 00402EC0: cvReleaseMat.CXCORE099(00000124), ref: 00402F21
Part of subcall function 00402EC0: cvReleaseMat.CXCORE099(00000128), ref: 00402F33
Part of subcall function 00402EC0: cvReleaseMat.CXCORE099(0000012C), ref: 00402F45
Part of subcall function 00402EC0: cvReleaseMat.CXCORE099(00000130), ref: 00402F57
Part of subcall function 00402EC0: cvReleaseMat.CXCORE099(00000134), ref: 00402F69
Part of subcall function 00402EC0: cvReleaseMat.CXCORE099(00000100), ref: 00402F77
Part of subcall function 00402EC0: cvReleaseMat.CXCORE099(00000104), ref: 00402F89
Part of subcall function 00402EC0: cvReleaseMat.CXCORE099(00000110), ref: 00402F9B
Part of subcall function 00402EC0: cvReleaseMat.CXCORE099(00000108), ref: 00402FAD
Part of subcall function 00402EC0: cvReleaseMat.CXCORE099(0000010C), ref: 00402FBF
Part of subcall function 00402EC0: cvReleaseMat.CXCORE099(00000138), ref: 00402FD1
Part of subcall function 00402EC0: cvReleaseMat.CXCORE099(0000013C), ref: 00402FE3

cvReleaseImage.CXCORE099(?,?,?,004012A0,?), ref: 00401313
cvReleaseImage.CXCORE099(00000000,?,?,004012A0,?), ref: 00401325
cvReleaseImage.CXCORE099(00000000,?,?,004012A0,?), ref: 00401337
cvReleaseImage.CXCORE099(-000000A8,?,?,004012A0,?), ref: 00401347
cvReleaseImage.CXCORE099(?,-000000A8,?,?,004012A0,?), ref: 00401355
cvReleaseMat.CXCORE099(00000000,004012A0,?), ref: 0040136E
cvReleaseImage.CXCORE099(?,004012A0,?), ref: 0040137C
??3@YAXPAX@Z.MSVCR80(?,004012A0,?), ref: 00401387

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Release$Image$??3@
String ID:
API String ID: 4199280203-0
Opcode ID: ce4da6eb0e3a7f94bb66be05ad3657c3e2c6a0438bd0ebaefe0091d5ba8a80e6
Instruction ID: 9a6bf2f685f8ffb5b2492dd8c0792c90c05741bbbc79e9eb21885bcc9159b9e2
Opcode Fuzzy Hash: ce4da6eb0e3a7f94bb66be05ad3657c3e2c6a0438bd0ebaefe0091d5ba8a80e6
Instruction Fuzzy Hash: 8F11E9F580021297FB20AB14E84AB5BB7A8EF41700F58443AE845636D0F73DF9A5C797

Function 004C27C0 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 336COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(map/set<T> too long,4FF694EA,?,?,00000000,00534159,000000FF,?,004C2664,?,00000001,00000000,004BCB55,00000001,00000000,00000000), ref: 004C2804
std::bad_exception::bad_exception.LIBCMTD ref: 004C2818
_CxxThrowException.MSVCR80(d&L,0057CBF8), ref: 004C2826
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(d&L,0057CBF8,?,?,?,00000000,00534159,000000FF,?,004C2664,?,00000001,00000000,004BCB55,00000001,00000000), ref: 004C2835

Strings

map/set<T> too long, xrefs: 004C27FC
d&L, xrefs: 004C2815, 004C2822, 004C2825

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: d&L$map/set<T> too long
API String ID: 3248949544-2396053701
Opcode ID: 9e2109b489b36a333a9366bcbadb2707d019cd34c0dca1b399f2e05f1bc863c7
Instruction ID: 0421590c6fc88a653ea049570befb3043dc480636a3316981a528d684021d55e
Opcode Fuzzy Hash: 9e2109b489b36a333a9366bcbadb2707d019cd34c0dca1b399f2e05f1bc863c7
Instruction Fuzzy Hash: 8DD11B74A002459FCB04FFA9C991EAF7776AF89304B20456EF4159B356CB78AC05CBB8

Function 004D4D80 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 336COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(map/set<T> too long,4FF694EA,?,?,00000000,00535759,000000FF,?,004D4C24,?,00000001,00000000,?,00000001,00000000,00000000), ref: 004D4DC4
std::bad_exception::bad_exception.LIBCMTD ref: 004D4DD8
_CxxThrowException.MSVCR80($LM,0057CBF8), ref: 004D4DE6
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80($LM,0057CBF8,?,?,?,00000000,00535759,000000FF,?,004D4C24,?,00000001,00000000,?,00000001,00000000), ref: 004D4DF5

Strings

map/set<T> too long, xrefs: 004D4DBC
$LM, xrefs: 004D4DD5, 004D4DE2, 004D4DE5

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: $LM$map/set<T> too long
API String ID: 3248949544-3238143215
Opcode ID: b3a5ef0cd3d0604de93e7cfc4f998ecbca4839092f53841d330d18dc272e40e7
Instruction ID: a07927191520cae1e6be455f76438f534ad6819f987c116f95f500b89d554bea
Opcode Fuzzy Hash: b3a5ef0cd3d0604de93e7cfc4f998ecbca4839092f53841d330d18dc272e40e7
Instruction Fuzzy Hash: A9D10B71A142159FCB04EFE5E8A1E6F7776AFC9304B50455FF0129B359DA38AC02CBA8

Function 004AAB20 Relevance: 10.8, APIs: 3, Strings: 3, Instructions: 256COMMON

Download Yara Rule

APIs

Part of subcall function 00438A10: clock.MSVCR80 ref: 00438AA7
Part of subcall function 00438A10: _DebugHeapAllocator.LIBCPMTD ref: 00438AC5

Concurrency::task_options::get_scheduler.LIBCPMTD ref: 004AAC1D
Concurrency::details::SchedulerBase::GetPolicy.LIBCMTD ref: 004AAC4F

Part of subcall function 00438AF0: clock.MSVCR80 ref: 00438B1F

Strings

CVideoProcessor::InsertEffectToStack, xrefs: 004AAB4B
Inserting effect %s to stack at position %d., xrefs: 004AACE1
Inserting effect %s\%s\%s to stack at position %d., xrefs: 004AAC73

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: clock$AllocatorBase::Concurrency::details::Concurrency::task_options::get_schedulerDebugHeapPolicyScheduler
String ID: CVideoProcessor::InsertEffectToStack$Inserting effect %s to stack at position %d.$Inserting effect %s\%s\%s to stack at position %d.
API String ID: 1896687067-3121683814
Opcode ID: 2f379fbdc71ef8fe106dd6932f9e4df42c7bfac42d585d9b32fea62b007a0ea8
Instruction ID: 105fcc333d0e6ff14583993c1dd746094cb4f3fab98b4d368d8a839d86cc259d
Opcode Fuzzy Hash: 2f379fbdc71ef8fe106dd6932f9e4df42c7bfac42d585d9b32fea62b007a0ea8
Instruction Fuzzy Hash: 56B12B70900208EFCB14DFA8C891BDEBBB5BF59314F10825EE419AB391DB74AE45CB95

Function 00BAB0A0 Relevance: 10.7, APIs: 4, Strings: 2, Instructions: 201COMMON

Download Yara Rule

APIs

??2@YAPAXI@Z.MSVCR80(00000080), ref: 00BAB104
sprintf.MSVCR80 ref: 00BAB148
sprintf.MSVCR80 ref: 00BAB184

Strings

%4d, xrefs: 00BAB142
P%c%d %d255, xrefs: 00BAB17E

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: sprintf$??2@
String ID: %4d$P%c%d %d255
API String ID: 4280736075-1612107885
Opcode ID: 2ef824b6ebf7f496c96240c5c320af09e8d2abddcd591acfad5a02f0bca62ecc
Instruction ID: 939180a55e987f1b0d5bf8b28de1ff796b9a808571eed7c945126ab54f12dd39
Opcode Fuzzy Hash: 2ef824b6ebf7f496c96240c5c320af09e8d2abddcd591acfad5a02f0bca62ecc
Instruction Fuzzy Hash: 8E61D6725083554BC310DF28D890A6BBBD1FFD6308F19469DE8A5AB302D736EE49C792

Function 004F6860 Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 180memoryCOMMON

Download Yara Rule

APIs

_DebugHeapAllocator.LIBCPMTD ref: 004F68AB
_DebugHeapAllocator.LIBCPMTD ref: 004F68DB
_DebugHeapAllocator.LIBCPMTD ref: 004F6903
_DebugHeapAllocator.LIBCPMTD ref: 004F692B

Part of subcall function 004CB0F0: _DebugHeapAllocator.LIBCPMTD ref: 004CB139
Part of subcall function 004CB0F0: _DebugHeapAllocator.LIBCPMTD ref: 004CB155
Part of subcall function 004CB0F0: _DebugHeapAllocator.LIBCPMTD ref: 004CB171
Part of subcall function 004CB0F0: _DebugHeapAllocator.LIBCPMTD ref: 004CB1A3
Part of subcall function 004CB0F0: _DebugHeapAllocator.LIBCPMTD ref: 004CB1D6

??0CxImage@@QAE@K@Z.CXIMAGECRT(00000000,000000FF,?,?,?,?,?,?,?,?,?,00000000,?,00000001,4FF694EA), ref: 004F696D

Part of subcall function 004CB5F0: SHGetSpecialFolderPathW.SHELL32(00000000,?,?,00000000), ref: 004CB626
Part of subcall function 004CB5F0: _wmkdir.MSVCR80 ref: 004CB633

Part of subcall function 0040EE30: _DebugHeapAllocator.LIBCPMTD ref: 0040EE68
Part of subcall function 0040EE30: _DebugHeapAllocator.LIBCPMTD ref: 0040EEAA

Part of subcall function 004164A0: FindFirstFileW.KERNEL32(00000000,00000104,000000D8,00000104,00000000), ref: 004164F5

Strings

\ManyCam\BackgroundEffect, xrefs: 004F69A8

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$FileFindFirstFolderImage@@PathSpecial_wmkdir
String ID: \ManyCam\BackgroundEffect
API String ID: 711174743-980167294
Opcode ID: be2178804a92c928cd2aed66c8cbe30649dd095b03b0f11a4b1ac172dfbbafa9
Instruction ID: 1d1004133df218b0561d43129003d36592f772ef424460559cb02d2d1cb950c8
Opcode Fuzzy Hash: be2178804a92c928cd2aed66c8cbe30649dd095b03b0f11a4b1ac172dfbbafa9
Instruction Fuzzy Hash: 5E8189B0901258DEDB14EF64DC41BDEBBB6AB94308F0081DEE449A3281DB795B98CF95

Function 00BAA491 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 145fileCOMMON

Download Yara Rule

APIs

_setjmp3.MSVCR80 ref: 00BAA4F0
fopen.MSVCR80 ref: 00BAA50C
??2@YAPAXI@Z.MSVCR80(00000000,?,?,?,?,?,?,?,00000008,00000000,00000000,00000000,00000000), ref: 00BAA59B
fclose.MSVCR80 ref: 00BAA5FB
??3@YAXPAX@Z.MSVCR80(00000000), ref: 00BAA605

Strings

1.2.8, xrefs: 00BAA4AE

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: ??2@??3@_setjmp3fclosefopen
String ID: 1.2.8
API String ID: 1448151454-509886058
Opcode ID: 203332a85b987586e0fdf55093f101a3d0e5f9fe2c2874babb7686388b733652
Instruction ID: 8c0fc75cf307b42d7c6953a3f7f5ece34d8b09befc54d2b7f94e3dd19e271621
Opcode Fuzzy Hash: 203332a85b987586e0fdf55093f101a3d0e5f9fe2c2874babb7686388b733652
Instruction Fuzzy Hash: 704180B5D042487BDB209BA98C86EAFBBF8EF95300F04449DF905A7301DA75DA40C7B2

Function 00BAA4A0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 143fileCOMMON

Download Yara Rule

APIs

_setjmp3.MSVCR80 ref: 00BAA4F0
fopen.MSVCR80 ref: 00BAA50C
??2@YAPAXI@Z.MSVCR80(00000000,?,?,?,?,?,?,?,00000008,00000000,00000000,00000000,00000000), ref: 00BAA59B
fclose.MSVCR80 ref: 00BAA5FB
??3@YAXPAX@Z.MSVCR80(00000000), ref: 00BAA605

Strings

1.2.8, xrefs: 00BAA4AE

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: ??2@??3@_setjmp3fclosefopen
String ID: 1.2.8
API String ID: 1448151454-509886058
Opcode ID: 53e3baf8ea1ec9a2c0d2c82138433da7b107e6b878e629c6fd63755787e7c6ca
Instruction ID: a0f5c744e98c55e8ffe95eb8126859d036f861a43d16526884680ffddf4120b6
Opcode Fuzzy Hash: 53e3baf8ea1ec9a2c0d2c82138433da7b107e6b878e629c6fd63755787e7c6ca
Instruction Fuzzy Hash: 2E417FB5E04249ABDB149BA98C86EAFBBB8EF95300F04449DF905E3301DA75DA40C7B1

Function 00513CB0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 140COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::GetPolicy.LIBCMTD ref: 00513D55
Concurrency::task_options::get_scheduler.LIBCPMTD ref: 00513D92
cvCreateImage.CXCORE099(?,?,00000008,00000004), ref: 00513E4E
cvResize.CV099(00000000,00000000,00000001), ref: 00513E63

Strings

Avatars, xrefs: 00513D7F
Objects, xrefs: 00513D42

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Base::Concurrency::details::Concurrency::task_options::get_schedulerCreateImagePolicyResizeScheduler
String ID: Avatars$Objects
API String ID: 2992923878-1969768225
Opcode ID: 88d80d9e5b1925a2c6919934a6c20aa7d629ba449a3cc0373393a8c87a9d5497
Instruction ID: 11ef104c15373c8e9f941a2410d1520fa6931b44404b7003273920e72e9da790
Opcode Fuzzy Hash: 88d80d9e5b1925a2c6919934a6c20aa7d629ba449a3cc0373393a8c87a9d5497
Instruction Fuzzy Hash: 385189B1D00209DBDF04DFA5E8A66EEBFB5FF48300F10816AE455BB294DB355A58CB81

Function 00405430 Relevance: 10.6, APIs: 7, Instructions: 129COMMON

Download Yara Rule

APIs

cvSet.CXCORE099(?,?,?,?,?,?,?,00000000,?,?,00405609,00000000,?,?,?,?), ref: 00405455
_CIcos.MSVCR80 ref: 004054AB
_CIsin.MSVCR80 ref: 004054C0
_CIcos.MSVCR80 ref: 00405513
_CIsin.MSVCR80 ref: 00405528

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: IcosIsin
String ID:
API String ID: 14690888-0
Opcode ID: 276f5b0b340e471206aa856c43127869a290fb93fcdf002dd0d7d5e66133fcaa
Instruction ID: f55afc7f36c79dbe8a91edad75af3db0966c0985aa664003f4d56b1ff0a10eb2
Opcode Fuzzy Hash: 276f5b0b340e471206aa856c43127869a290fb93fcdf002dd0d7d5e66133fcaa
Instruction Fuzzy Hash: A351AF34609602DFC324DF14E68982ABBB0FF84700B918D88E4E5676A9D731E879CA56

Function 004A93F0 Relevance: 10.6, APIs: 7, Instructions: 118memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 00416740: _DebugHeapAllocator.LIBCPMTD ref: 00416795

_DebugHeapAllocator.LIBCPMTD ref: 004A945B

Part of subcall function 0040EA00: _DebugHeapAllocator.LIBCPMTD ref: 0040EA0E

Part of subcall function 004164A0: FindFirstFileW.KERNEL32(00000000,00000104,000000D8,00000104,00000000), ref: 004164F5

wcscmp.MSVCR80 ref: 004A948B
wcscmp.MSVCR80 ref: 004A94A4
_DebugHeapAllocator.LIBCPMTD ref: 004A94F6
_DebugHeapAllocator.LIBCPMTD ref: 004A9508
wcslen.MSVCR80 ref: 004A9514
wcslen.MSVCR80 ref: 004A957A

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$wcscmpwcslen$FileFindFirst
String ID:
API String ID: 1577558999-0
Opcode ID: 0cb7d27af655883c31428af5e0bb9fad3cc48976a5dbef61661fdd01497b3954
Instruction ID: f16ea4ad88e480f90c3d3a557b52af9eaab9dd6428fdd0c1f69d551c8bda1375
Opcode Fuzzy Hash: 0cb7d27af655883c31428af5e0bb9fad3cc48976a5dbef61661fdd01497b3954
Instruction Fuzzy Hash: 5E5120B19041189BCB24EB65DD91BEDB774BF14308F0085EE960A62281EF34AF88CF5C

Function 00BA4AD0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 100registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.ADVAPI32(80000001,?,00000000,00000001,?,100B0000), ref: 00BA4B50
RegQueryValueExA.ADVAPI32(?,?,?,?,?,Left,00000000,?,?,?), ref: 00BA4B8C
RegQueryValueExA.ADVAPI32(?,Top,00000000,?,?,?,?,?,?,?,?,Left,00000000,?,?,?), ref: 00BA4BA9
RegCloseKey.ADVAPI32(?,?,?,?,?,?,Left,00000000,?,?,?), ref: 00BA4BEF

Strings

Top, xrefs: 00BA4BA3
Left, xrefs: 00BA4B7E

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: QueryValue$CloseOpen
String ID: Left$Top
API String ID: 1586453840-3873733008
Opcode ID: 36dc72a02fc4799f8ac7fec9ecef12e8ee42cd430fdc574bea0dfab2813f2a14
Instruction ID: 2c74f2efe4ad05c1ed3078c2f673e50955c372b18751a5fdf3913158a6eb66e7
Opcode Fuzzy Hash: 36dc72a02fc4799f8ac7fec9ecef12e8ee42cd430fdc574bea0dfab2813f2a14
Instruction Fuzzy Hash: 1B31B271108305AFD314CF28D9A1B9B77E9EBC9704F508A5DF585C7290DBB0D948CBA2

Function 00BC10C0 Relevance: 10.6, APIs: 2, Strings: 5, Instructions: 76COMMON

Download Yara Rule

APIs

sprintf.MSVCR80 ref: 00BC1103
sprintf.MSVCR80 ref: 00BC1126

Strings

The png struct allocated by the application for reading is too small., xrefs: 00BC1148
Application is running with png.c from libpng-%.20s, xrefs: 00BC1120
Application was compiled with png.h from libpng-%.20s, xrefs: 00BC10FD
The info struct allocated by application for reading is too small., xrefs: 00BC1174
1.2.8, xrefs: 00BC1117

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: sprintf
String ID: 1.2.8$Application is running with png.c from libpng-%.20s$Application was compiled with png.h from libpng-%.20s$The info struct allocated by application for reading is too small.$The png struct allocated by the application for reading is too small.
API String ID: 590974362-206690659
Opcode ID: 45d918e21b5e5d5d22e2151d5d5a5710f13bd75c08118fd3e46f8e76c94092c0
Instruction ID: 0b148046a1c8e86ba44aa9b18e514a3947154c245a6adc0dd288728e5148bd48
Opcode Fuzzy Hash: 45d918e21b5e5d5d22e2151d5d5a5710f13bd75c08118fd3e46f8e76c94092c0
Instruction Fuzzy Hash: E021B0B29483045BD200EB59DC81E6BF7E8EFD5704F000D8DF69067352E676E845CBA2

Function 00BC8E70 Relevance: 10.6, APIs: 2, Strings: 5, Instructions: 76COMMON

Download Yara Rule

APIs

sprintf.MSVCR80 ref: 00BC8EB3
sprintf.MSVCR80 ref: 00BC8ED6

Strings

The png struct allocated by the application for writing is too small., xrefs: 00BC8EF8
Application is running with png.c from libpng-%.20s, xrefs: 00BC8ED0
Application was compiled with png.h from libpng-%.20s, xrefs: 00BC8EAD
1.2.8, xrefs: 00BC8EC7
The info struct allocated by the application for writing is too small., xrefs: 00BC8F24

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: sprintf
String ID: 1.2.8$Application is running with png.c from libpng-%.20s$Application was compiled with png.h from libpng-%.20s$The info struct allocated by the application for writing is too small.$The png struct allocated by the application for writing is too small.
API String ID: 590974362-2898919677
Opcode ID: cc979e0fcb94ed5735a271ade1d65a2d2bc43b75629a28d9a78f9d572401cec8
Instruction ID: 47ce6a27014bc5736ddc66e1a9d105ce6167cf2eb045dcae9c117c14868cd20a
Opcode Fuzzy Hash: cc979e0fcb94ed5735a271ade1d65a2d2bc43b75629a28d9a78f9d572401cec8
Instruction Fuzzy Hash: B021C1B29483049BD200EB59DC81D7BF7E9BFD9704F00099DF68457362EA71E845CBA2

Function 00BDD410 Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 57COMMON

Download Yara Rule

APIs

fprintf.MSVCR80 ref: 00BDD424
fprintf.MSVCR80 ref: 00BDD48A

Strings

field[%2d] %5lu, %2d, %2d, %d, %2d, %5s, %5s, %s, xrefs: 00BDD484
%s: , xrefs: 00BDD41E
FALSE, xrefs: 00BDD44F, 00BDD460
TRUE, xrefs: 00BDD440, 00BDD459, 00BDD469, 00BDD46C

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: fprintf
String ID: %s: $FALSE$TRUE$field[%2d] %5lu, %2d, %2d, %d, %2d, %5s, %5s, %s
API String ID: 383729395-878487725
Opcode ID: d55cf8583d5cfa63a2bf2c635677ebd19d82dfc616c002e0d54125ac9b68aa76
Instruction ID: 15877fe85a3a76ba4f6447a45e701445bcb9e5e97ee0fd4095623b121671e646
Opcode Fuzzy Hash: d55cf8583d5cfa63a2bf2c635677ebd19d82dfc616c002e0d54125ac9b68aa76
Instruction Fuzzy Hash: B211A1722002146BD304CF55EC98D77FBE9EF89711B14C199FA499B322E731E819CBA0

Function 00BA54B0 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 41COMMON

Download Yara Rule

APIs

cvError.CXCORE099(000000E5,cvMoveWindow,NULL name,.\window_w32.cpp,000002D0), ref: 00BA54D2
GetWindowRect.USER32(?,?), ref: 00BA54F3
MoveWindow.USER32(?,?,?,?,?,00000001), ref: 00BA551B

Strings

.\window_w32.cpp, xrefs: 00BA54C1
NULL name, xrefs: 00BA54C6
cvMoveWindow, xrefs: 00BA54CB

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Window$ErrorMoveRect
String ID: .\window_w32.cpp$NULL name$cvMoveWindow
API String ID: 3407777569-1568378838
Opcode ID: 7f66ac4049fa2d2a2626538fe197f4c058338a691ba4d8adc1dc23fb9fcbe968
Instruction ID: 99bc7216d592c7bb0eb048600eae33fec0abbc68e4f44cdce58c535ad606168c
Opcode Fuzzy Hash: 7f66ac4049fa2d2a2626538fe197f4c058338a691ba4d8adc1dc23fb9fcbe968
Instruction Fuzzy Hash: E7F0D6716087117FC620EF1CCC81D6B73E8EF84B10F444A88F989A7255E670EC048792

Function 00BA4E60 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 33windowCOMMON

Download Yara Rule

APIs

cvError.CXCORE099(000000E5,cvDestroyWindow,NULL name string,.\window_w32.cpp,000001E4), ref: 00BA4E7F
SendMessageA.USER32(?,00000010,00000000,00000000), ref: 00BA4EA6
SendMessageA.USER32(?,00000010,00000000,00000000), ref: 00BA4EAF

Strings

.\window_w32.cpp, xrefs: 00BA4E6E
NULL name string, xrefs: 00BA4E73
cvDestroyWindow, xrefs: 00BA4E78

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: MessageSend$Error
String ID: .\window_w32.cpp$NULL name string$cvDestroyWindow
API String ID: 3527474480-1091922320
Opcode ID: 362292900196ae27d1c198476952ccff0d0fb1987624bee7cb47323726256988
Instruction ID: 49e276239985f132a224a74eb72653dc56c832211e04d0a8e0105570c5a18b0a
Opcode Fuzzy Hash: 362292900196ae27d1c198476952ccff0d0fb1987624bee7cb47323726256988
Instruction Fuzzy Hash: D7E06D767883603ADA207615AC02F8A27D89BC5F20F1A05C5FB40BF1E1D6E0F84145A8

Function 004B5F10 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 33COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(vector<T> too long,4FF694EA,?,?,?,?,?,?,?,00000000,005337E9,000000FF,?,004B5503,004B1AE0), ref: 004B5F3D
std::bad_exception::bad_exception.LIBCMTD ref: 004B5F51
_CxxThrowException.MSVCR80(?,0057CBF8), ref: 004B5F5F
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(?,0057CBF8,?,?,?,?,?,?,?,?,00000000,005337E9,000000FF,?,004B5503,004B1AE0), ref: 004B5F6E

Strings

vector<T> too long, xrefs: 004B5F35
CKK, xrefs: 004B5F2C, 004B5F74

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: CKK$vector<T> too long
API String ID: 3248949544-3216571628
Opcode ID: 3718fa35949eba5a82b900746a9376809f8905b55e5b69c6eb2af84f65c3591d
Instruction ID: c8d92b487c042dcc06c93ea087005db71d51a26c7136d47a4fad7ddcb25ee778
Opcode Fuzzy Hash: 3718fa35949eba5a82b900746a9376809f8905b55e5b69c6eb2af84f65c3591d
Instruction Fuzzy Hash: 47F0AFB1904248EBCB14DF90ED41FDDBB78FB04720F40022AF812A32C0DB756A08CB54

Function 00BAB8E0 Relevance: 9.5, APIs: 6, Instructions: 462COMMON

Download Yara Rule

APIs

??2@YAPAXI@Z.MSVCR80(?), ref: 00BAB997
??2@YAPAXI@Z.MSVCR80(?), ref: 00BAB9B1
_setjmp3.MSVCR80 ref: 00BAB9F8
memset.MSVCR80 ref: 00BABB4F
??3@YAXPAX@Z.MSVCR80(?), ref: 00BABF0D
??3@YAXPAX@Z.MSVCR80(?), ref: 00BABF23

Part of subcall function 00BA6CF0: memcpy.MSVCR80(?,?,?), ref: 00BA6D3A

Part of subcall function 00BA4200: memset.MSVCR80 ref: 00BA4235

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: ??2@??3@memset$_setjmp3memcpy
String ID:
API String ID: 2276023410-0
Opcode ID: c26f298e9756bf6c2da45383d9edc0f1c75b65feaf803d1aa62cb16887d22a45
Instruction ID: 21dc9e38a7ea06f1ca41396c12daf8bada7e1cf7cc104a6dfbdcd8642ac17dae
Opcode Fuzzy Hash: c26f298e9756bf6c2da45383d9edc0f1c75b65feaf803d1aa62cb16887d22a45
Instruction Fuzzy Hash: E3023AB1904249AFDB24DFA8D885FEEB7F5FF85304F148569E425A7242EB30A944CB60

Function 00BE23F0 Relevance: 9.1, APIs: 6, Instructions: 138COMMON

Download Yara Rule

APIs

_ftol.MSVCR80 ref: 00BE2490
_ftol.MSVCR80 ref: 00BE24C2
_ftol.MSVCR80 ref: 00BE24D7
_ftol.MSVCR80 ref: 00BE250D
_ftol.MSVCR80 ref: 00BE251E
_ftol.MSVCR80 ref: 00BE2554

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: _ftol
String ID:
API String ID: 2545261903-0
Opcode ID: 6e25e0a92975731556c8be33ed4c7c75cce5ac4d16dda86ee715fe020b63b943
Instruction ID: 03d2a1c9e01a2b9d6b5f447dada079063c4ebb84a0e19e83657974ce733d0f87
Opcode Fuzzy Hash: 6e25e0a92975731556c8be33ed4c7c75cce5ac4d16dda86ee715fe020b63b943
Instruction Fuzzy Hash: 68512531604741CFC3259F22E65816ABBF8FF95390F52499CE1D792AA9C734E8A18F42

Function 004E2290 Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 336COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(map/set<T> too long,4FF694EA,?,?,00000000,00536A39,000000FF,?,004E1A94,?,00000001,00000000,004E0575,00000001,00000000,00000000), ref: 004E22D4
std::bad_exception::bad_exception.LIBCMTD ref: 004E22E8
_CxxThrowException.MSVCR80(004E1A94,0057CBF8), ref: 004E22F6
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(004E1A94,0057CBF8,?,?,?,00000000,00536A39,000000FF,?,004E1A94,?,00000001,00000000,004E0575,00000001,00000000), ref: 004E2305

Strings

map/set<T> too long, xrefs: 004E22CC

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: map/set<T> too long
API String ID: 3248949544-1285458680
Opcode ID: 037b1c6f34042e82ce7b50c5ae10a42ae7eaf65c3770f3036ce6bbe0d0c371b4
Instruction ID: eb3dced5db3925a888724237d041c26940005993663a78e11fc02054abcc7e87
Opcode Fuzzy Hash: 037b1c6f34042e82ce7b50c5ae10a42ae7eaf65c3770f3036ce6bbe0d0c371b4
Instruction Fuzzy Hash: E7D10F70A002C99FCB04EFAAC991D6F777ABF89345B10455EF4119F366CA78AC01DBA4

Function 00411300 Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 336COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(map/set<T> too long,4FF694EA,?,?,00000000,00528E39,000000FF,?,004112C4,?,00000001,00000000,0040F3C5,00000001,00000000,00000000), ref: 00411344
std::bad_exception::bad_exception.LIBCMTD ref: 00411358
_CxxThrowException.MSVCR80(004112C4,0057CBF8), ref: 00411366
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(004112C4,0057CBF8,?,?,?,00000000,00528E39,000000FF,?,004112C4,?,00000001,00000000,0040F3C5,00000001,00000000), ref: 00411375

Strings

map/set<T> too long, xrefs: 0041133C

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: map/set<T> too long
API String ID: 3248949544-1285458680
Opcode ID: 42cbf8a29792d702c98aabde1d8b08b81332d8e2c8f3267b75d2f7efa1133912
Instruction ID: fc6447a121a983bb72d300740fc035bcb7914751d3a952c33331dda71f3fca67
Opcode Fuzzy Hash: 42cbf8a29792d702c98aabde1d8b08b81332d8e2c8f3267b75d2f7efa1133912
Instruction Fuzzy Hash: 4DD12D70A002099FCB04EFE5C991EEFB775AF89304B10455EF512AB365CA7CAD51CBA8

Function 004C14E0 Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 336COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(map/set<T> too long,4FF694EA,?,?,00000000,005340C9,000000FF,?,004C1384,?,00000001,00000000,004BAFA3,00000001,00000000,00000000), ref: 004C1524
std::bad_exception::bad_exception.LIBCMTD ref: 004C1538
_CxxThrowException.MSVCR80(004C1384,0057CBF8), ref: 004C1546
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(004C1384,0057CBF8,?,?,?,00000000,005340C9,000000FF,?,004C1384,?,00000001,00000000,004BAFA3,00000001,00000000), ref: 004C1555

Strings

map/set<T> too long, xrefs: 004C151C

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: map/set<T> too long
API String ID: 3248949544-1285458680
Opcode ID: 373c4984a0380365a134575c025ccd3d03ef30724ed9c15aa6ec8d22811ce55d
Instruction ID: 5f54f1dc26024d97c3e5589f28a2b26444c27508ce2d65950266073b7809569a
Opcode Fuzzy Hash: 373c4984a0380365a134575c025ccd3d03ef30724ed9c15aa6ec8d22811ce55d
Instruction Fuzzy Hash: D1D10F75E042459FCB04EFA5C891EAF7775AF8A304F1045AEF502AB355DA38AD01CBB8

Function 0048D7D0 Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 336COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(map/set<T> too long,4FF694EA,?,?,?,00530F79,000000FF,?,0048AEF4,?,00000001,?,?,00000001,00000000,00000000), ref: 0048D814
std::bad_exception::bad_exception.LIBCMTD ref: 0048D828
_CxxThrowException.MSVCR80(0048AEF4,0057CBF8), ref: 0048D836
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(0048AEF4,0057CBF8,?,?,?,00530F79,000000FF,?,0048AEF4,?,00000001,?,?,00000001,00000000,00000000), ref: 0048D845

Strings

map/set<T> too long, xrefs: 0048D80C

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: map/set<T> too long
API String ID: 3248949544-1285458680
Opcode ID: 30f3dba2d2509044dd435c0e4a58e2e90cb7d7e200ab4d5d41f53f078059e0ff
Instruction ID: f924f05d9c195ac9d2efefafaa7b998481315dfbc5b04f0f3db32ea2b030e7a3
Opcode Fuzzy Hash: 30f3dba2d2509044dd435c0e4a58e2e90cb7d7e200ab4d5d41f53f078059e0ff
Instruction Fuzzy Hash: 1ED1DB74E102459FCB04FFA5C891E6F7B75AF89304F10896EF4159B295CA38AD01CFA8

Function 0048C8C0 Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 336COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(map/set<T> too long,4FF694EA,?,?,?,00530F19,000000FF,?,0048A224,?,00000001,?,?,00000001,00000000,00000000), ref: 0048C904
std::bad_exception::bad_exception.LIBCMTD ref: 0048C918
_CxxThrowException.MSVCR80(0048A224,0057CBF8), ref: 0048C926
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(0048A224,0057CBF8,?,?,?,00530F19,000000FF,?,0048A224,?,00000001,?,?,00000001,00000000,00000000), ref: 0048C935

Strings

map/set<T> too long, xrefs: 0048C8FC

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: map/set<T> too long
API String ID: 3248949544-1285458680
Opcode ID: 5d9bd5cfefa7126eaa9cce7f59cf12a6ec2056fb24f196b19c599b19faf1435e
Instruction ID: 781e3e5cdacf5d297dd74e0af013611e08a9c6e7430d9740113c692fd0013158
Opcode Fuzzy Hash: 5d9bd5cfefa7126eaa9cce7f59cf12a6ec2056fb24f196b19c599b19faf1435e
Instruction Fuzzy Hash: B0D1ED70A002499FCB04FFA5C891D6F7775EF8A708F20496EF6159B255CB38AD05CBA8

Function 004C7A20 Relevance: 9.1, APIs: 1, Strings: 5, Instructions: 86COMMON

Download Yara Rule

APIs

Part of subcall function 00438A10: clock.MSVCR80 ref: 00438AA7
Part of subcall function 00438A10: _DebugHeapAllocator.LIBCPMTD ref: 00438AC5

Part of subcall function 00407140: RegOpenKeyExW.ADVAPI32(?,80000002,00000000,00000000,00000000,80000002,SOFTWARE\ManyCam), ref: 00407162

memset.MSVCR80 ref: 004C7ABE

Part of subcall function 00407190: RegQueryValueExW.ADVAPI32(00000040,?,00000000,00000040,?,?,004C7AEB,AppVersion,?,00000040,80000002,SOFTWARE\ManyCam,00020019), ref: 004071CC

Part of subcall function 00416740: _DebugHeapAllocator.LIBCPMTD ref: 00416795

Part of subcall function 00438AF0: clock.MSVCR80 ref: 00438B1F

Strings

@, xrefs: 004C7AC6
AppVersion, xrefs: 004C7ADE
ob@, xrefs: 004C7A62, 004C7B52, 004C7B19, 004C7A65
CManyCamModel::GetManyCamVersion, xrefs: 004C7A5B
SOFTWARE\ManyCam, xrefs: 004C7A86

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeapclock$OpenQueryValuememset
String ID: @$AppVersion$CManyCamModel::GetManyCamVersion$SOFTWARE\ManyCam$ob@
API String ID: 1430646295-175800182
Opcode ID: 99caf996730d2821cc7d9e1b6342d5801e04e7129e3737ca7ce9bef82be1f397
Instruction ID: 07a999de59d8292b32f2331ae8109d5d18864066084ba78fe0f4ff90b5b286a5
Opcode Fuzzy Hash: 99caf996730d2821cc7d9e1b6342d5801e04e7129e3737ca7ce9bef82be1f397
Instruction Fuzzy Hash: 31315B70A04218DEDB10DB54D952BEEBBB4AB05304F0041AEE5457B2C1DBB86E48CBA6

Function 004C1CC0 Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 336COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(map/set<T> too long,4FF694EA,?,?,00000000,005340F9,000000FF,?,004C1B64,?,00000001,00000000,004BB8D3,00000001,00000000,00000000), ref: 004C1D04
std::bad_exception::bad_exception.LIBCMTD ref: 004C1D18
_CxxThrowException.MSVCR80(004C1B64,0057CBF8), ref: 004C1D26
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(004C1B64,0057CBF8,?,?,?,00000000,005340F9,000000FF,?,004C1B64,?,00000001,00000000,004BB8D3,00000001,00000000), ref: 004C1D35

Strings

map/set<T> too long, xrefs: 004C1CFC

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: map/set<T> too long
API String ID: 3248949544-1285458680
Opcode ID: 244b48426afd2b3cb84e5586bde9a12e9605ad4a338fae707614c6ae995eb5f3
Instruction ID: 76fe67f2c80d83fee2b03a8fd12379f2c1e3e221b52a71524e2575de1d4bc0e2
Opcode Fuzzy Hash: 244b48426afd2b3cb84e5586bde9a12e9605ad4a338fae707614c6ae995eb5f3
Instruction Fuzzy Hash: 1DD1E974A00205AFCB14EFE6C891EEF7775AFC9308B104D5EF4129B256DA39A801CBB5

Function 00474C80 Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 336COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(map/set<T> too long,4FF694EA,?,?,00000000,0052F989,000000FF,?,00474884,?,00000001,00000000,004A9763,00000001,00000000,00000000), ref: 00474CC4
std::bad_exception::bad_exception.LIBCMTD ref: 00474CD8
_CxxThrowException.MSVCR80(00474884,0057CBF8), ref: 00474CE6
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(00474884,0057CBF8,?,?,?,00000000,0052F989,000000FF,?,00474884,?,00000001,00000000,004A9763,00000001,00000000), ref: 00474CF5

Strings

map/set<T> too long, xrefs: 00474CBC

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: map/set<T> too long
API String ID: 3248949544-1285458680
Opcode ID: fb5a5b0bfe5d7466eb37912541b6a1e1978402ae83b6b00b3775f69bc8b7d628
Instruction ID: 902e9eb1271cb93d2a72db74486b01d1d5c84e1b516abcfe74867b495f5f0d12
Opcode Fuzzy Hash: fb5a5b0bfe5d7466eb37912541b6a1e1978402ae83b6b00b3775f69bc8b7d628
Instruction Fuzzy Hash: 1ED1FB70A002099FCB04EFA5D891EEF7776AF89318B20855EF4159F295CB38AC51CBA5

Function 0048CF10 Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 336COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(map/set<T> too long,4FF694EA,?,?,?,00530F49,000000FF,?,0048A514,?,00000001,?,?,00000001,00000000,00000000), ref: 0048CF54
std::bad_exception::bad_exception.LIBCMTD ref: 0048CF68
_CxxThrowException.MSVCR80(0048A514,0057CBF8), ref: 0048CF76
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(0048A514,0057CBF8,?,?,?,00530F49,000000FF,?,0048A514,?,00000001,?,?,00000001,00000000,00000000), ref: 0048CF85

Strings

map/set<T> too long, xrefs: 0048CF4C

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: map/set<T> too long
API String ID: 3248949544-1285458680
Opcode ID: 6ffb65bce278b8fe47ce7c833305a1f3afc7f0cb37ed8eddf46bce9baa873d41
Instruction ID: 50f8718e498666fa4da98437a76d4638b1e2a723603710fac9882f3192207998
Opcode Fuzzy Hash: 6ffb65bce278b8fe47ce7c833305a1f3afc7f0cb37ed8eddf46bce9baa873d41
Instruction Fuzzy Hash: 1BD1AA70A002459FCB04FFA5D8D1EAF77B6BF89304B10495EF511AB396CA39A901CBE5

Function 004059C0 Relevance: 9.1, APIs: 6, Instructions: 85COMMON

Download Yara Rule

APIs

cvCreateMat.CXCORE099(00000004,00000001,00000005,?,?,004015E6,?), ref: 004059C9
cvCreateMat.CXCORE099(00000004,00000001,00000005,?,?,?,?,?,004015E6,?), ref: 00405A0C
cvCreateMat.CXCORE099(00000004,00000001,00000005,?,?,?,?,?,?,?,?,004015E6,?), ref: 00405A4F

Part of subcall function 004057D0: cvCreateMat.CXCORE099(00000004,00000004,00000005,?,?,?,?,00000000), ref: 004057DA
Part of subcall function 004057D0: cvCreateMat.CXCORE099(00000004,00000004,00000005,?,?,?,?,?,?,00000000), ref: 004057EC
Part of subcall function 004057D0: cvCreateMat.CXCORE099(00000004,00000004,00000005,?,?,?,?,?,?,?,?,?,00000000), ref: 004057FE
Part of subcall function 004057D0: cvCreateMat.CXCORE099(00000004,00000004,00000005,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00405810
Part of subcall function 004057D0: cvGEMM.CXCORE099(?,?), ref: 0040586A
Part of subcall function 004057D0: cvGEMM.CXCORE099(?,?), ref: 00405895
Part of subcall function 004057D0: cvReleaseMat.CXCORE099(?), ref: 004058A2
Part of subcall function 004057D0: cvReleaseMat.CXCORE099(?), ref: 004058AF
Part of subcall function 004057D0: cvReleaseMat.CXCORE099(?), ref: 004058BC
Part of subcall function 004057D0: cvReleaseMat.CXCORE099(?), ref: 004058C9

cvReleaseMat.CXCORE099(?,?,?,?,00000000), ref: 00405A9A
cvReleaseMat.CXCORE099(?), ref: 00405AA7
cvReleaseMat.CXCORE099(?), ref: 00405AB4

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: CreateRelease
String ID:
API String ID: 557197377-0
Opcode ID: ba2c734ec160b10dc2be184458e091322f75ff8d3104fcbc22788eb87a98d7e3
Instruction ID: 043076e51676209564484e982c9936a884ec24064fff71ead1165430e30ebd4e
Opcode Fuzzy Hash: ba2c734ec160b10dc2be184458e091322f75ff8d3104fcbc22788eb87a98d7e3
Instruction Fuzzy Hash: C6311574605201DFD304DF10D499E26BBA1BFC8704F5289CCE2941B2E6DB71D936CB82

Function 00BDC890 Relevance: 9.1, APIs: 6, Instructions: 63memoryCOMMON

Download Yara Rule

APIs

GlobalAlloc.KERNEL32(00BE318D,?,?,00BDD370,8BFFFEFC,50242444), ref: 00BDC89F
GlobalSize.KERNEL32(00BE318D), ref: 00BDC8AB
GlobalAlloc.KERNEL32(00000000,00000008), ref: 00BDC8BE
GlobalFree.KERNEL32(00BE318D), ref: 00BDC8DF

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Global$Alloc$FreeSize
String ID:
API String ID: 716937079-0
Opcode ID: c57966c41bcae5a5613c2a68d3a0d1eee95758ea962e0941d1515f1d6502895c
Instruction ID: e75451590069454c8c8fa7967f3be1bc67a105aed8c69f0c920bca83598bc693
Opcode Fuzzy Hash: c57966c41bcae5a5613c2a68d3a0d1eee95758ea962e0941d1515f1d6502895c
Instruction Fuzzy Hash: 3E01F13270421A6F4B242A69BCD997BFBDEFF88621704006EF90AC7310CEA29C00D290

Function 00402BB0 Relevance: 9.1, APIs: 6, Instructions: 56COMMON

Download Yara Rule

APIs

cvCreateImage.CXCORE099(?,?,00000008,00000001,?,?,00403181,?,?), ref: 00402BC0
cvCreateImage.CXCORE099(?,?,00000008,00000001,?,00000000,?,00000000,?,0040120F), ref: 00402BD4
cvCreateImage.CXCORE099(?,?,00000020,00000003,?,?,?,?,?,00000000,?,00000000,?,0040120F), ref: 00402BE9
cvReleaseImage.CXCORE099(?,?,?,?,?,?,00000000,?,00000000,?,0040120F), ref: 00402BFE
cvReleaseImage.CXCORE099(?,?,00000000,?,00000000,?,0040120F), ref: 00402C10
cvReleaseImage.CXCORE099(?,?,00000000,?,00000000,?,0040120F), ref: 00402C22

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Image$CreateRelease
String ID:
API String ID: 3874174198-0
Opcode ID: 90bf2cca833fb2c28ec0a48af1516d2f96f179e9554cc466a05b48644bb4997a
Instruction ID: 6a9ac0958563a1589a8d938dd82cbe29a94ad790e47f913414e9d99cb75ce162
Opcode Fuzzy Hash: 90bf2cca833fb2c28ec0a48af1516d2f96f179e9554cc466a05b48644bb4997a
Instruction Fuzzy Hash: F901F9F590130176F630AB259D4EF4B76DCFF91701F04483AF55AA12C1F6B4E184C221

Function 004032A0 Relevance: 9.1, APIs: 6, Instructions: 54COMMON

Download Yara Rule

APIs

cvReleaseImage.CXCORE099(004012A4,00000100,004012A0,00000000,00402ECD,00000000,?,00401305,?,?,004012A0,?), ref: 004032CA
cvReleaseImage.CXCORE099(004012A8,00000100,004012A0,00000000,00402ECD,00000000,?,00401305,?,?,004012A0,?), ref: 004032DC
cvReleaseImage.CXCORE099(004012AC,00000100,004012A0,00000000,00402ECD,00000000,?,00401305,?,?,004012A0,?), ref: 004032EA
cvReleaseImage.CXCORE099(004012C0,00000100,004012A0,00000000,00402ECD,00000000,?,00401305,?,?,004012A0,?), ref: 00403302
cvReleaseImage.CXCORE099(004012C4,00000100,004012A0,00000000,00402ECD,00000000,?,00401305,?,?,004012A0,?), ref: 00403314
cvReleaseImage.CXCORE099(004012C8,00000100,004012A0,00000000,00402ECD,00000000,?,00401305,?,?,004012A0,?), ref: 00403326

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: ImageRelease
String ID:
API String ID: 535124018-0
Opcode ID: d5d590391344c0c731e22e2c0c0412fa703b525e44fcf2c6df5cf6810ee77da8
Instruction ID: f6f80441a689a6daaa6ac2ab205e4bd6027bf7437223482053866a57996ed6f5
Opcode Fuzzy Hash: d5d590391344c0c731e22e2c0c0412fa703b525e44fcf2c6df5cf6810ee77da8
Instruction Fuzzy Hash: A91198F6801201E7EB309E11D889B4BBBACBF50302F44443AD84552285E778B78DCAAB

Function 00BC9810 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 159COMMON

Download Yara Rule

Strings

Unknown filter heuristic method, xrefs: 00BC981D

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID:
String ID: Unknown filter heuristic method
API String ID: 0-3224722364
Opcode ID: 4b09512b79f11d5f32bddc69761e10fb2d2eb72687894118f6a15ee70bf8d8a4
Instruction ID: 603b83a70caa8e6cfe2bdc21c61fc4ac4eeb7d4c0bd7500cfa4e657c2a0b140c
Opcode Fuzzy Hash: 4b09512b79f11d5f32bddc69761e10fb2d2eb72687894118f6a15ee70bf8d8a4
Instruction Fuzzy Hash: 6F51A030600B4687E720AF65D9CDF97B3E4FF56304F1149ADE4AA8B266DB70E846C742

Function 00434B70 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 152COMMON

Download Yara Rule

APIs

Part of subcall function 00447FF0: SendMessageW.USER32(?,0000110A,00000000,00000000), ref: 00448006

Concurrency::details::SchedulerBase::GetPolicy.LIBCMTD ref: 00434C17

Part of subcall function 004DB530: _DebugHeapAllocator.LIBCPMTD ref: 004DB54A

memset.MSVCR80 ref: 00434C2B

Part of subcall function 00447E60: SendMessageW.USER32(?,00001132,00000000,yLC), ref: 00447E78

Concurrency::task_options::get_scheduler.LIBCPMTD ref: 00434CEC

Part of subcall function 004DAF40: _DebugHeapAllocator.LIBCPMTD ref: 004DAF57

memset.MSVCR80 ref: 00434D1D

Strings

pzC, xrefs: 00434BF8

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeapMessageSendmemset$Base::Concurrency::details::Concurrency::task_options::get_schedulerPolicyScheduler
String ID: pzC
API String ID: 1527497025-2444570644
Opcode ID: e3d9d7585f77d899c6d2de3521e35a6c3d02375cb3cf3d8ffcf042e74bc981e3
Instruction ID: ed1ee3073941a6660e753338659c4a22794240fa1e9d27d03445b3c6d8f704d4
Opcode Fuzzy Hash: e3d9d7585f77d899c6d2de3521e35a6c3d02375cb3cf3d8ffcf042e74bc981e3
Instruction Fuzzy Hash: 9C610CB1D01118DBDB14DFA5D891BEEBBB5FF48304F2041AEE10A67281DB386A45CF99

Function 00BA2880 Relevance: 8.9, APIs: 7, Instructions: 125COMMON

Download Yara Rule

APIs

??2@YAPAXI@Z.MSVCR80(00000010,BBF2B238,?,?,?,?,00BEC6CD,000000FF), ref: 00BA28A7
??2@YAPAXI@Z.MSVCR80(00000010,?,?,?,?,?,?,?,000000FF), ref: 00BA28D5
??2@YAPAXI@Z.MSVCR80(00000010,00000000,?,?,?,?,?,?,?,?,000000FF), ref: 00BA2906
??2@YAPAXI@Z.MSVCR80(00000010,00000000,?,?,?,?,?,?,?,?,?,000000FF), ref: 00BA2937
??2@YAPAXI@Z.MSVCR80(00000010,00000000,?,?,?,?,?,?,?,?,?,?,000000FF), ref: 00BA2968
??2@YAPAXI@Z.MSVCR80(00000010,00000000,?,?,?,?,?,?,?,?,?,?,?,000000FF), ref: 00BA2999
??2@YAPAXI@Z.MSVCR80(00000010,00000000,?,?,?,?,?,?,?,?,?,?,?,?,000000FF), ref: 00BA29CA

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: ??2@
String ID:
API String ID: 1033339047-0
Opcode ID: 4a294e4750e6155027a2cc4c109b753baf24bf2c3117ff0c3cad685908369b9e
Instruction ID: f9a5126c7ef4eea20ea89e37642b477bea35a12e8e2ae76f67b3453f62095822
Opcode Fuzzy Hash: 4a294e4750e6155027a2cc4c109b753baf24bf2c3117ff0c3cad685908369b9e
Instruction Fuzzy Hash: E4415BB0A0C3419EE746EF7A885676B76D4AF85700F2048BEF499C7381EB78D4449F52

Function 00408360 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 116stringCOMMON

Download Yara Rule

APIs

lstrlenW.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 004083C6
CompareStringW.KERNEL32(00000400,00000001,?,00000003,<A>,00000003), ref: 00408424
CompareStringW.KERNEL32(00000400,00000001,?,00000004,</A>,00000004), ref: 00408474

Strings

<A>, xrefs: 0040840C
</A>, xrefs: 0040845C

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: CompareString$lstrlen
String ID: </A>$<A>
API String ID: 1657112622-2122467442
Opcode ID: 71153d6a453ea1603edaace69c389d9b4173073ffd4576bfc9ed4d047b5a66fa
Instruction ID: 8d4014fe370238e856f28d0c67f96b0aed6e5c53389ece421d0f182d8b12796b
Opcode Fuzzy Hash: 71153d6a453ea1603edaace69c389d9b4173073ffd4576bfc9ed4d047b5a66fa
Instruction Fuzzy Hash: CB5121B4A0421ADFDB04CF88C990BAEB7B2FF84304F108159E915AB3D0DB75A946CF95

Function 00BB11D0 Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 99COMMON

Download Yara Rule

APIs

Part of subcall function 00BB2FC0: malloc.MSVCR80 ref: 00BB2FC5

getenv.MSVCR80 ref: 00BB1296
sscanf.MSVCR80 ref: 00BB12B8

Strings

x, xrefs: 00BB12B3
JPEGMEM, xrefs: 00BB128E
%ld%c, xrefs: 00BB12AD

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: getenvmallocsscanf
String ID: %ld%c$JPEGMEM$x
API String ID: 677315340-3402169052
Opcode ID: 6d5f80548da4754cab6ab6784f58e229dfa50144270ba315e37d5072346f99e4
Instruction ID: b89ca819da25bb07d35b0c74dccf7dcacde3a767575a24c4621d9b35031c3a21
Opcode Fuzzy Hash: 6d5f80548da4754cab6ab6784f58e229dfa50144270ba315e37d5072346f99e4
Instruction Fuzzy Hash: AA4159B14007059FD720CF1DC8849A7BBF8FF41748B908AAEE1968B651E7B1E919CF91

Function 004098C0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 76memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 004CB670: _DebugHeapAllocator.LIBCPMTD ref: 004CB6AA
Part of subcall function 004CB670: _DebugHeapAllocator.LIBCPMTD ref: 004CB711
Part of subcall function 004CB670: _DebugHeapAllocator.LIBCPMTD ref: 004CB76F
Part of subcall function 004CB670: _DebugHeapAllocator.LIBCPMTD ref: 004CB787

_DebugHeapAllocator.LIBCPMTD ref: 00409943

Part of subcall function 0040EA00: _DebugHeapAllocator.LIBCPMTD ref: 0040EA0E

Part of subcall function 0040EE30: _DebugHeapAllocator.LIBCPMTD ref: 0040EE68
Part of subcall function 0040EE30: _DebugHeapAllocator.LIBCPMTD ref: 0040EEAA

_DebugHeapAllocator.LIBCPMTD ref: 00409981
?Load@CxImage@@QAE_NPB_WK@Z.CXIMAGECRT(00000000,00000000,.png,?,?,0053CC2C,data\images\addEffectDlg\,?,?,?,4FF694EA), ref: 004099A1

Strings

.png, xrefs: 00409979
data\images\addEffectDlg\, xrefs: 0040993B

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$Image@@Load@
String ID: .png$data\images\addEffectDlg\
API String ID: 1315443971-2820274302
Opcode ID: b1f5f912a3a6442a3cc382653bc540b1293c177797d8700b4929a6cfcbca8e46
Instruction ID: 99387fa8a9a4026cbf0ab0abdc8698a1dc38235ed2b893dafecf0ce6710d2d8a
Opcode Fuzzy Hash: b1f5f912a3a6442a3cc382653bc540b1293c177797d8700b4929a6cfcbca8e46
Instruction Fuzzy Hash: 363117B1D1520CABCB04EFA9D945BDDBFB4FB08304F10852EE42577281D7745909CB98

Function 0041C830 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 75memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 004CB670: _DebugHeapAllocator.LIBCPMTD ref: 004CB6AA
Part of subcall function 004CB670: _DebugHeapAllocator.LIBCPMTD ref: 004CB711
Part of subcall function 004CB670: _DebugHeapAllocator.LIBCPMTD ref: 004CB76F
Part of subcall function 004CB670: _DebugHeapAllocator.LIBCPMTD ref: 004CB787

_DebugHeapAllocator.LIBCPMTD ref: 0041C8AC

Part of subcall function 0040EA00: _DebugHeapAllocator.LIBCPMTD ref: 0040EA0E

Part of subcall function 0040EE30: _DebugHeapAllocator.LIBCPMTD ref: 0040EE68
Part of subcall function 0040EE30: _DebugHeapAllocator.LIBCPMTD ref: 0040EEAA

_DebugHeapAllocator.LIBCPMTD ref: 0041C8EA
?Load@CxImage@@QAE_NPB_WK@Z.CXIMAGECRT(00000000,00000000,.png,0041C80E,00000049,0053F620,data\images\maindlg\,00000049,?,00000000,4FF694EA,?,0041C80E,0000000C,00000049), ref: 0041C90D

Strings

.png, xrefs: 0041C8E2
data\images\maindlg\, xrefs: 0041C8A4

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$Image@@Load@
String ID: .png$data\images\maindlg\
API String ID: 1315443971-2402009575
Opcode ID: 1ae46db1c05b4e9d5e20b3199a0bbc276ac8498851860a350528a00f3f14c102
Instruction ID: 95f2c906bb04f7db6848c29b7cfe536fa7cadaced1f5336b0e2a281727f52370
Opcode Fuzzy Hash: 1ae46db1c05b4e9d5e20b3199a0bbc276ac8498851860a350528a00f3f14c102
Instruction Fuzzy Hash: AD312DB1D05248EBCB04EFA5D986BDDBBB4FF18714F10452EE01577291D7746A08CBA8

Function 0041DB20 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 75memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 004CB670: _DebugHeapAllocator.LIBCPMTD ref: 004CB6AA
Part of subcall function 004CB670: _DebugHeapAllocator.LIBCPMTD ref: 004CB711
Part of subcall function 004CB670: _DebugHeapAllocator.LIBCPMTD ref: 004CB76F
Part of subcall function 004CB670: _DebugHeapAllocator.LIBCPMTD ref: 004CB787

_DebugHeapAllocator.LIBCPMTD ref: 0041DB9C

Part of subcall function 0040EA00: _DebugHeapAllocator.LIBCPMTD ref: 0040EA0E

Part of subcall function 0040EE30: _DebugHeapAllocator.LIBCPMTD ref: 0040EE68
Part of subcall function 0040EE30: _DebugHeapAllocator.LIBCPMTD ref: 0040EEAA

_DebugHeapAllocator.LIBCPMTD ref: 0041DBDA
?Load@CxImage@@QAE_NPB_WK@Z.CXIMAGECRT(00000000,00000000,.png,?,?,005405C4,data\images\maindlg\,?,?,?,4FF694EA,Zoom in,CameraDlg\btn_zoomIn,00000000,?), ref: 0041DBFD

Strings

data\images\maindlg\, xrefs: 0041DB94
.png, xrefs: 0041DBD2

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$Image@@Load@
String ID: .png$data\images\maindlg\
API String ID: 1315443971-2402009575
Opcode ID: 339cf44c9e6672a47bb4ab3fad3452b9ff9abffd4164bb4841253d5f49bda66a
Instruction ID: d4b00160755fc9498c9e644aa4a373da1a989c0672b95b20752ea7274bdd65c2
Opcode Fuzzy Hash: 339cf44c9e6672a47bb4ab3fad3452b9ff9abffd4164bb4841253d5f49bda66a
Instruction Fuzzy Hash: 03313AB1D052089BCB04EF94D945BDEBBB4FB48318F20852EE516772C1D7746A48CBA8

Function 00BCB6B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 58COMMON

Download Yara Rule

APIs

fprintf.MSVCR80 ref: 00BCB703
fprintf.MSVCR80 ref: 00BCB721
fprintf.MSVCR80 ref: 00BCB73E

Strings

libpng warning: %s, xrefs: 00BCB71B, 00BCB738
libpng warning no. %s: %s, xrefs: 00BCB6FD

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: fprintf
String ID: libpng warning no. %s: %s$libpng warning: %s
API String ID: 383729395-566911401
Opcode ID: 8d7790b9076616dab5083d579a7fb7d975b3136fc4a80f718a2f139df253a2f3
Instruction ID: add5db46f1065a85ffa32e8805135ec831d03e9c88d2d39abb20843beb9463bd
Opcode Fuzzy Hash: 8d7790b9076616dab5083d579a7fb7d975b3136fc4a80f718a2f139df253a2f3
Instruction Fuzzy Hash: AD0166716001811BD7105B2CEC9AE7E7BDADFC2308F8848CDE48AAF7A3D6759859C212

Function 00BA5E90 Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 46windowCOMMON

Download Yara Rule

APIs

SendMessageA.USER32(?,00000405,00000001,?), ref: 00BA5ED7
cvError.CXCORE099(000000E5,cvSetTrackbarPos,NULL trackbar or window name,.\window_w32.cpp,00000598), ref: 00BA5EFF

Strings

NULL trackbar or window name, xrefs: 00BA5EF3
.\window_w32.cpp, xrefs: 00BA5EEE
cvSetTrackbarPos, xrefs: 00BA5EF8

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: ErrorMessageSend
String ID: .\window_w32.cpp$NULL trackbar or window name$cvSetTrackbarPos
API String ID: 1924224178-4125994439
Opcode ID: 752b77e5b66faf96b23d086e6eb52988b27c8a6bfcbc839e985d91b4be27d73e
Instruction ID: b0ced94f92b89ad23022ba6045e497d34a6b460bbd9cbaf0e258d7557e3f1d24
Opcode Fuzzy Hash: 752b77e5b66faf96b23d086e6eb52988b27c8a6bfcbc839e985d91b4be27d73e
Instruction Fuzzy Hash: 6CF02373748F502BC630A529AC01E5B72D59BC2F20F0B05D4F915EB250FB71EE014691

Function 0048F010 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(vector<T> too long,4FF694EA,?,?,?,?,?,?,?,00000000,00531089,000000FF,?,0048BDE3,?), ref: 0048F03D
std::bad_exception::bad_exception.LIBCMTD ref: 0048F051
_CxxThrowException.MSVCR80(?,0057CBF8), ref: 0048F05F
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(?,0057CBF8,?,?,?,?,?,?,?,?,00000000,00531089,000000FF,?,0048BDE3,?), ref: 0048F06E

Strings

vector<T> too long, xrefs: 0048F035

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: vector<T> too long
API String ID: 3248949544-3788999226
Opcode ID: 71dadd736df40f3aec662dc85990cd5a9acc2abe6039822e8930e788f3d2d61d
Instruction ID: 682a0ac2237076830f2f8a4780188971040c04754dbc9da0d02d05fab003b1b6
Opcode Fuzzy Hash: 71dadd736df40f3aec662dc85990cd5a9acc2abe6039822e8930e788f3d2d61d
Instruction Fuzzy Hash: EAF04FB1944648EBCB14DFA4ED45FDDBB78FB14720F50426AF812A32D0DB756A08CB54

Function 005154A0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(vector<T> too long,4FF694EA,?,?,?,?,?,?,?,00000000,00539FA9,000000FF,?,00514D33,00000000), ref: 005154CD
std::bad_exception::bad_exception.LIBCMTD ref: 005154E1
_CxxThrowException.MSVCR80(?,0057CBF8), ref: 005154EF
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(?,0057CBF8,?,?,?,?,?,?,?,?,00000000,00539FA9,000000FF,?,00514D33,00000000), ref: 005154FE

Strings

vector<T> too long, xrefs: 005154C5

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: vector<T> too long
API String ID: 3248949544-3788999226
Opcode ID: 21906fa773c1a88a46cbeca3caa33a554fe8bf6e2e2ae55b577b5ad68c6107b2
Instruction ID: 3b973596a2f941747c7d90d8fc74631754525317a6dec37d5ee4e5a0a6c799d4
Opcode Fuzzy Hash: 21906fa773c1a88a46cbeca3caa33a554fe8bf6e2e2ae55b577b5ad68c6107b2
Instruction Fuzzy Hash: 5EF0AFB1904248EBCB14DF90ED41FDDBB78FB04720F40022AF812A32C0DB756A08CB54

Function 0048F5A0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(vector<T> too long,4FF694EA,?,?,?,?,?,?,?,00000000,005310F9,000000FF,?,0048C0E3,?), ref: 0048F5CD
std::bad_exception::bad_exception.LIBCMTD ref: 0048F5E1
_CxxThrowException.MSVCR80(?,0057CBF8), ref: 0048F5EF
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(?,0057CBF8,?,?,?,?,?,?,?,?,00000000,005310F9,000000FF,?,0048C0E3,?), ref: 0048F5FE

Strings

vector<T> too long, xrefs: 0048F5C5

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: vector<T> too long
API String ID: 3248949544-3788999226
Opcode ID: 2e5544c3049f0ddd4019a116dffb44736a158589b34b35f21578acc8ae9f3b44
Instruction ID: 08e9fbeb3975674469a3edd29ebdb77383574d31636ade62e638ab3924d92cf8
Opcode Fuzzy Hash: 2e5544c3049f0ddd4019a116dffb44736a158589b34b35f21578acc8ae9f3b44
Instruction Fuzzy Hash: 3DF0AFB1944648EBCB14DFA4ED45FDDBB78FB04720F40022AF812A32C0DB756A08CB54

Function 004307E0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(vector<T> too long,4FF694EA,?,?,?,?,?,?,?,00000000,0052A649,000000FF,?,004304C6,?,4FF694EA), ref: 0043080D
std::bad_exception::bad_exception.LIBCMTD ref: 00430821
_CxxThrowException.MSVCR80(?,0057CBF8), ref: 0043082F
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(?,0057CBF8,?,?,?,?,?,?,?,?,00000000,0052A649,000000FF,?,004304C6,?), ref: 0043083E

Strings

vector<T> too long, xrefs: 00430805

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: vector<T> too long
API String ID: 3248949544-3788999226
Opcode ID: e084c971732a66b90e1072e7244ee56ba224c388b66ba4f93c615bfa38d58c9c
Instruction ID: 84ce0209dc11d6b23fc1989ca18a4f5fc0ac43ec5a2d3810fda43137453e27bd
Opcode Fuzzy Hash: e084c971732a66b90e1072e7244ee56ba224c388b66ba4f93c615bfa38d58c9c
Instruction Fuzzy Hash: FCF0A9B1944248EBCB14DFA0ED41FDDBB78FB04720F40022AF822A32C0EB756A08CB54

Function 004E27F0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(vector<T> too long,4FF694EA,?,?,?,?,?,?,?,?,00000000,00536A69,000000FF,?,004E144B,4FF694EA), ref: 004E281D
std::bad_exception::bad_exception.LIBCMTD ref: 004E2831
_CxxThrowException.MSVCR80(?,0057CBF8), ref: 004E283F
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(?,0057CBF8,?,?,?,?,?,?,?,?,?,00000000,00536A69,000000FF,?,004E144B), ref: 004E284E

Strings

vector<T> too long, xrefs: 004E2815

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: vector<T> too long
API String ID: 3248949544-3788999226
Opcode ID: dc35638380dab2938959a34dbcce56baedfc7c7e4cd6927fef2e7d6d97a3b54c
Instruction ID: 0a4d440cb5536f40db0fd076e9c7fc5d2a12fc606929b1cb6c9b0b09eff913f8
Opcode Fuzzy Hash: dc35638380dab2938959a34dbcce56baedfc7c7e4cd6927fef2e7d6d97a3b54c
Instruction Fuzzy Hash: B4F03CB1944648EBCB14DF94ED45B9DBB78FB14720F50426AA812A32D0DB756A08CB54

Function 005158F0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(vector<T> too long,4FF694EA,?,?,?,?,?,?,?,00000000,00539FF9,000000FF,?,00515013,00000000), ref: 0051591D
std::bad_exception::bad_exception.LIBCMTD ref: 00515931
_CxxThrowException.MSVCR80(?,0057CBF8), ref: 0051593F
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(?,0057CBF8,?,?,?,?,?,?,?,?,00000000,00539FF9,000000FF,?,00515013,00000000), ref: 0051594E

Strings

vector<T> too long, xrefs: 00515915

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: vector<T> too long
API String ID: 3248949544-3788999226
Opcode ID: c03e804887ee8c35b5c9129f015bd810eaabdc85a554e80187cf2ad872c0fd71
Instruction ID: 51a0fa11ac444c003223335a96b02d8df365eee37e9292b937eae9cfb1e93a6e
Opcode Fuzzy Hash: c03e804887ee8c35b5c9129f015bd810eaabdc85a554e80187cf2ad872c0fd71
Instruction Fuzzy Hash: ABF0A9B1944248EBCB14DFA4ED41FDDBB78FB04720F40022AF822A32C0EB756A08CB54

Function 00412890 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(vector<T> too long,4FF694EA,?,?,?,?,?,?,?,00000000,00528FB9,000000FF,?,00411C76,?,4FF694EA), ref: 004128BD
std::bad_exception::bad_exception.LIBCMTD ref: 004128D1
_CxxThrowException.MSVCR80(?,0057CBF8), ref: 004128DF
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(?,0057CBF8,?,?,?,?,?,?,?,?,00000000,00528FB9,000000FF,?,00411C76,?), ref: 004128EE

Strings

vector<T> too long, xrefs: 004128B5

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: vector<T> too long
API String ID: 3248949544-3788999226
Opcode ID: c780cc5cd66b70a61fb923b6734da329fed68386e0d1462283d30a24de8a1d3f
Instruction ID: 4f722f1132bf029aa43680a0f31b4d6b59234f2f3b0eea29470ee80f38ab1d71
Opcode Fuzzy Hash: c780cc5cd66b70a61fb923b6734da329fed68386e0d1462283d30a24de8a1d3f
Instruction Fuzzy Hash: B3F08CB1904248EBCB14DF90ED41B9DBB78FB04720F40022AB812A32C0EB756A08CB54

Function 004D4940 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(vector<T> too long,4FF694EA,?,?,?,?,?,?,?,00000000,00535729,000000FF,?,004D3CB6,00000000,4FF694EA), ref: 004D496D
std::bad_exception::bad_exception.LIBCMTD ref: 004D4981
_CxxThrowException.MSVCR80(?,0057CBF8), ref: 004D498F
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(?,0057CBF8,?,?,?,?,?,?,?,?,00000000,00535729,000000FF,?,004D3CB6,00000000), ref: 004D499E

Strings

vector<T> too long, xrefs: 004D4965

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: vector<T> too long
API String ID: 3248949544-3788999226
Opcode ID: f5e9ddf57e258ff8f81d687b94cbb6babb7938dca145e5172867018050d52fb0
Instruction ID: 2198fcef12488e2d17d3691da39b82749544227340ee56d3737a145847e009f6
Opcode Fuzzy Hash: f5e9ddf57e258ff8f81d687b94cbb6babb7938dca145e5172867018050d52fb0
Instruction Fuzzy Hash: 21F0A9B1904648EBCB14DFA0ED41FDDBB78FB04720F40022AF822A32C0EB756A08CB54

Function 004B5A70 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(vector<T> too long,4FF694EA,?,?,?,?,?,?,?,00000000,00533789,000000FF,?,004B5203,?), ref: 004B5A9D
std::bad_exception::bad_exception.LIBCMTD ref: 004B5AB1
_CxxThrowException.MSVCR80(?,0057CBF8), ref: 004B5ABF
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(?,0057CBF8,?,?,?,?,?,?,?,?,00000000,00533789,000000FF,?,004B5203,?), ref: 004B5ACE

Strings

vector<T> too long, xrefs: 004B5A95

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: vector<T> too long
API String ID: 3248949544-3788999226
Opcode ID: 7d4be2965033fb03e547b7350437180e22248366361f058fced24ed85baafd60
Instruction ID: fc41df5464ddba924a0dc626ab5e99040adcc0584381bc92148727cb0a18adb2
Opcode Fuzzy Hash: 7d4be2965033fb03e547b7350437180e22248366361f058fced24ed85baafd60
Instruction Fuzzy Hash: C9F0AFB1904248EBCB14DF90ED41FDDBB78FB04720F40022AF812A32C0DB756A08CB54

Function 0048FA20 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(vector<T> too long,4FF694EA,?,?,?,?,?,?,?,00000000,00531159,000000FF,?,0048C3E3,?), ref: 0048FA4D
std::bad_exception::bad_exception.LIBCMTD ref: 0048FA61
_CxxThrowException.MSVCR80(?,0057CBF8), ref: 0048FA6F
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(?,0057CBF8,?,?,?,?,?,?,?,?,00000000,00531159,000000FF,?,0048C3E3,?), ref: 0048FA7E

Strings

vector<T> too long, xrefs: 0048FA45

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: vector<T> too long
API String ID: 3248949544-3788999226
Opcode ID: e43f4da5e34bbdf5da09b38449cb6b4d10e80e7ee71886185af6db6e9ad99d86
Instruction ID: c8a4cafde9e9d18d89a6ec27ab975a93f5cc337054f01616f8720c420af3b1d3
Opcode Fuzzy Hash: e43f4da5e34bbdf5da09b38449cb6b4d10e80e7ee71886185af6db6e9ad99d86
Instruction Fuzzy Hash: 9BF087B1904648EBCB14DFA0ED41BDDBB78FB04720F40022AE822A32C0EB756A08CB54

Function 00411B80 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(vector<T> too long,4FF694EA,?,?,?,?,?,?,?,00000000,00528E99,000000FF,?,00410AF3,00000000), ref: 00411BAD
std::bad_exception::bad_exception.LIBCMTD ref: 00411BC1
_CxxThrowException.MSVCR80(?,0057CBF8), ref: 00411BCF
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(?,0057CBF8,?,?,?,?,?,?,?,?,00000000,00528E99,000000FF,?,00410AF3,00000000), ref: 00411BDE

Strings

vector<T> too long, xrefs: 00411BA5

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: vector<T> too long
API String ID: 3248949544-3788999226
Opcode ID: 91c4acec3fcf390d7650ee22321e3af3fea277019d6c7fd99ac7c15ae0389148
Instruction ID: ab577654a64f9acfc70fc64036853a5e06cda14a9969e1db11fea8e1d234e52f
Opcode Fuzzy Hash: 91c4acec3fcf390d7650ee22321e3af3fea277019d6c7fd99ac7c15ae0389148
Instruction Fuzzy Hash: 4EF08CB1904248EBCB14DF90ED41B9DBB78FB14720F40022AA822A32C0DB756A08CB54

Function 0048EBA0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(vector<T> too long,4FF694EA,?,?,?,?,?,?,?,00000000,00531039,000000FF,?,0048BAC3,?), ref: 0048EBCD
std::bad_exception::bad_exception.LIBCMTD ref: 0048EBE1
_CxxThrowException.MSVCR80(?,0057CBF8), ref: 0048EBEF
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(?,0057CBF8,?,?,?,?,?,?,?,?,00000000,00531039,000000FF,?,0048BAC3,?), ref: 0048EBFE

Strings

vector<T> too long, xrefs: 0048EBC5

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: vector<T> too long
API String ID: 3248949544-3788999226
Opcode ID: 1ea01a54b671203e94099090e90c6f810493855dc45a6ce695e3d5e9399e45a7
Instruction ID: 92daabea73afc4e90302cbcf7baf13e44f6b9f868eface51cfc7e975ed78bb7a
Opcode Fuzzy Hash: 1ea01a54b671203e94099090e90c6f810493855dc45a6ce695e3d5e9399e45a7
Instruction Fuzzy Hash: 95F03CB1944648EBCB14DFA4ED45B9DBB78FB14720F50426AE812A32D0DB756A08CB54

Function 0044ED50 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(vector<T> too long,4FF694EA,?,?,?,?,?,?,?,00000000,0052CF99,000000FF,?,0044CB83,00000000), ref: 0044ED7D
std::bad_exception::bad_exception.LIBCMTD ref: 0044ED91
_CxxThrowException.MSVCR80(?,0057CBF8), ref: 0044ED9F
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(?,0057CBF8,?,?,?,?,?,?,?,?,00000000,0052CF99,000000FF,?,0044CB83,00000000), ref: 0044EDAE

Strings

vector<T> too long, xrefs: 0044ED75

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: vector<T> too long
API String ID: 3248949544-3788999226
Opcode ID: 5b8e1bbaaa4858481c8b052d95aae316f4802631e30b8cefb630b981b18aab31
Instruction ID: f5a7866f547bb55f07dc25e2db114e65ea79899798aec203e725cd6f1ff4eb0e
Opcode Fuzzy Hash: 5b8e1bbaaa4858481c8b052d95aae316f4802631e30b8cefb630b981b18aab31
Instruction Fuzzy Hash: E2F0AFB1904248EBCB14DF90ED41FDDBB78FB04720F40022AF812A32C0EB756A08CB54

Function 00413D60 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(vector<T> too long,4FF694EA,?,?,?,?,?,?,?,?,00000000,00529039,000000FF,?,0041396B,4FF694EA), ref: 00413D8D
std::bad_exception::bad_exception.LIBCMTD ref: 00413DA1
_CxxThrowException.MSVCR80(?,0057CBF8), ref: 00413DAF
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(?,0057CBF8,?,?,?,?,?,?,?,?,?,00000000,00529039,000000FF,?,0041396B), ref: 00413DBE

Strings

vector<T> too long, xrefs: 00413D85

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: vector<T> too long
API String ID: 3248949544-3788999226
Opcode ID: 448ea5f94cb60192865ba4fbef2add8389144e365060ecc549b7188aeb5b01d7
Instruction ID: 9c1b3f4287bc4e1579ca5606d1e83d7bd75289f32f9710707e675685a1b0ed81
Opcode Fuzzy Hash: 448ea5f94cb60192865ba4fbef2add8389144e365060ecc549b7188aeb5b01d7
Instruction Fuzzy Hash: 35F08CB1904248EBCB14DF90ED45B9DBB78FB04720F40022AA822A32C0DB756A08CB54

Function 00430D10 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(vector<T> too long,4FF694EA,?,?,?,?,?,?,?,00000000,0052A699,000000FF,?,004301A3,00000000), ref: 00430D3D
std::bad_exception::bad_exception.LIBCMTD ref: 00430D51
_CxxThrowException.MSVCR80(?,0057CBF8), ref: 00430D5F
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(?,0057CBF8,?,?,?,?,?,?,?,?,00000000,0052A699,000000FF,?,004301A3,00000000), ref: 00430D6E

Strings

vector<T> too long, xrefs: 00430D35

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: vector<T> too long
API String ID: 3248949544-3788999226
Opcode ID: 4e7c7e61b8e4b61418f89952c155b68a96c666f8f64ae422fdef5ea6b294711e
Instruction ID: 2c432eddfbe67746ec497c333af96acf5ab7e20aac0011f52034aeffc7690669
Opcode Fuzzy Hash: 4e7c7e61b8e4b61418f89952c155b68a96c666f8f64ae422fdef5ea6b294711e
Instruction Fuzzy Hash: 43F0A9B1904248EBCB14DFA0ED41FDDBB78FB04720F40022AF822A32D0EB756A08CB54

Function 0048FE80 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(vector<T> too long,4FF694EA,?,?,?,?,?,?,?,00000000,005311A9,000000FF,?,0048C6C3,?), ref: 0048FEAD
std::bad_exception::bad_exception.LIBCMTD ref: 0048FEC1
_CxxThrowException.MSVCR80(?,0057CBF8), ref: 0048FECF
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(?,0057CBF8,?,?,?,?,?,?,?,?,00000000,005311A9,000000FF,?,0048C6C3,?), ref: 0048FEDE

Strings

vector<T> too long, xrefs: 0048FEA5

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: vector<T> too long
API String ID: 3248949544-3788999226
Opcode ID: 27461d1cee31f37f4b12f43d61b2addfb9a3f208f85983c24dba573d14a14082
Instruction ID: 5f6de052f28c2a1b459ecf3d81b30dea1840ef8b00bbd3f5c657bc7d8005cdfb
Opcode Fuzzy Hash: 27461d1cee31f37f4b12f43d61b2addfb9a3f208f85983c24dba573d14a14082
Instruction Fuzzy Hash: 0AF0A9B1904648EBCB14DFA0ED41FDDBB78FB04720F40022AF822A32C0EB756A08CB54

Function 0049EEA0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z.MSVCP80(vector<T> too long,4FF694EA,?,?,?,?,?,?,?,00000000,00531FD9,000000FF,?,0049E8F3,?), ref: 0049EECD
std::bad_exception::bad_exception.LIBCMTD ref: 0049EEE1
_CxxThrowException.MSVCR80(?,0057CBF8), ref: 0049EEEF
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ.MSVCP80(?,0057CBF8,?,?,?,?,?,?,?,?,00000000,00531FD9,000000FF,?,0049E8F3,?), ref: 0049EEFE

Strings

vector<T> too long, xrefs: 0049EEC5

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: D@2@@std@@D@std@@U?$char_traits@V?$allocator@$??0?$basic_string@??1?$basic_string@ExceptionThrowstd::bad_exception::bad_exception
String ID: vector<T> too long
API String ID: 3248949544-3788999226
Opcode ID: 164d6ffe732d9fa8baa0de175643794e8cd3c3d995353351aea268910f753e13
Instruction ID: 9df2125c4ef5457798524062e3a11b60d2f3a7f222f2b8b9a439bf1f8e3d57c1
Opcode Fuzzy Hash: 164d6ffe732d9fa8baa0de175643794e8cd3c3d995353351aea268910f753e13
Instruction Fuzzy Hash: 0DF03CB1944648EBCB14DFA4ED45B9DBB78FB14720F50426AB812A32D0DB756A08CB54

Function 00BA9E10 Relevance: 7.7, APIs: 5, Instructions: 166fileCOMMON

Download Yara Rule

APIs

_setjmp3.MSVCR80 ref: 00BA9E8C
fopen.MSVCR80 ref: 00BA9EBE
??2@YAPAXI@Z.MSVCR80(?), ref: 00BA9F47
fclose.MSVCR80 ref: 00BAA02C
??3@YAXPAX@Z.MSVCR80(?,?), ref: 00BAA042

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: ??2@??3@_setjmp3fclosefopen
String ID:
API String ID: 1448151454-0
Opcode ID: d855c881c434628db9814628784b8a4eb67e3614c714c2f7ff34a9d34f11fb0e
Instruction ID: cb196a1ac3b5d9877b17cde588b00280f2e9b0b7ffc733fb368271e901923b06
Opcode Fuzzy Hash: d855c881c434628db9814628784b8a4eb67e3614c714c2f7ff34a9d34f11fb0e
Instruction Fuzzy Hash: 395149B1D042689BDB34DF24CC81BDEB7B8AB16704F1045EAE919A7241DB71AEC4CF91

Function 0050D790 Relevance: 7.7, APIs: 6, Instructions: 164COMMON

Download Yara Rule

APIs

wcscpy.MSVCR80 ref: 0050D83B
wcscat.MSVCR80 ref: 0050D850

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: wcscatwcscpy
String ID:
API String ID: 1670345547-0
Opcode ID: e2b6f5d47b797e7b3fc719e1e1982e1acc003f1d96efd1ad022790a38e43f0aa
Instruction ID: 3389ee2cf22810ea72753d2d0cc2d0bc4eb9618de903a8545642f9e6fbc98239
Opcode Fuzzy Hash: e2b6f5d47b797e7b3fc719e1e1982e1acc003f1d96efd1ad022790a38e43f0aa
Instruction Fuzzy Hash: BF714EB5A0010ADFCB14CF54D984AAEBBB5FF85310F148998E90AAB381D770EE44CF65

Function 00503DF0 Relevance: 7.7, APIs: 5, Instructions: 164COMMON

Download Yara Rule

APIs

?good@ios_base@std@@QBE_NXZ.MSVCP80(4FF694EA,?,?,?,4FF694EA,000000FF,?,00538C88,000000FF,?,0050260E,?,00000001,4FF694EA), ref: 00503E2C
?flags@ios_base@std@@QBEHXZ.MSVCP80(?,?,?,4FF694EA,000000FF,?,00538C88,000000FF,?,0050260E,?,00000001,4FF694EA), ref: 00503E81
?getloc@ios_base@std@@QBE?AVlocale@2@XZ.MSVCP80(0050260E,?,?,?,4FF694EA,000000FF,?,00538C88,000000FF,?,0050260E,?,00000001,4FF694EA), ref: 00503E9F
??1locale@std@@QAE@XZ.MSVCP80(?,4FF694EA,000000FF,?,00538C88,000000FF,?,0050260E,?,00000001,4FF694EA), ref: 00503ECE
?good@ios_base@std@@QBE_NXZ.MSVCP80(?,?,?,4FF694EA,000000FF,?,00538C88,000000FF,?,0050260E,?,00000001,4FF694EA), ref: 00503FD0

Part of subcall function 00503AA0: ?fail@ios_base@std@@QBE_NXZ.MSVCP80 ref: 00503ABD

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: ?good@ios_base@std@@$??1locale@std@@?fail@ios_base@std@@?flags@ios_base@std@@?getloc@ios_base@std@@Vlocale@2@
String ID:
API String ID: 1501252752-0
Opcode ID: ddfaf7a637f4d78839835dee01d19acffd7136be91526d35f5f5c0920258139d
Instruction ID: 6ba259f0433efdbda44c084f56a44e9fe0f1a453adb065355b40409e40917acf
Opcode Fuzzy Hash: ddfaf7a637f4d78839835dee01d19acffd7136be91526d35f5f5c0920258139d
Instruction Fuzzy Hash: 9961F874E002099FCB04DFA4D995AEEBBF5FF89300F248159E502A7392DB36AE05DB50

Function 00BA5020 Relevance: 7.6, APIs: 5, Instructions: 112COMMON

Download Yara Rule

APIs

MoveWindow.USER32(?,?,?,?,?,00000001,00000000,00000000,00000000), ref: 00BA5149

Part of subcall function 00BA4F90: GdiFlush.GDI32(00BA5056,?,?,00000000,00000000,00000000), ref: 00BA4F93
Part of subcall function 00BA4F90: GetCurrentObject.GDI32(?,00000007), ref: 00BA4FA3

Part of subcall function 00BA4F00: GetClientRect.USER32(?,00000000), ref: 00BA4F0F
Part of subcall function 00BA4F00: GetWindowRect.USER32(?,?), ref: 00BA4F22
Part of subcall function 00BA4F00: SubtractRect.USER32(?,?,?), ref: 00BA4F41

MoveWindow.USER32(?,?,?,?,?,00000000,00000000), ref: 00BA50B0
GetClientRect.USER32(?,?), ref: 00BA50BB
GetWindowRect.USER32(?,?), ref: 00BA50CA
MoveWindow.USER32(?,?,?,00000001,00000001,00000001,?,?,?,?,00000000,00000000), ref: 00BA5106

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: RectWindow$Move$Client$CurrentFlushObjectSubtract
String ID:
API String ID: 1830049877-0
Opcode ID: 7adc8a7ba27a8156d75fa48761e3a76cd3b1d1429ee4f36bdc687c1e09b318fa
Instruction ID: f9240bd76939629919b36747904057a7d60cca338438f9ec1da505d450529402
Opcode Fuzzy Hash: 7adc8a7ba27a8156d75fa48761e3a76cd3b1d1429ee4f36bdc687c1e09b318fa
Instruction Fuzzy Hash: 8E417971614201AFCB04CF68DD85AABBBE9FFC8310F048A5DF94AA7214D674E945CB91

Function 00BA80A0 Relevance: 7.6, APIs: 6, Instructions: 104stringCOMMON

Download Yara Rule

APIs

strchr.MSVCR80 ref: 00BA80CA
strchr.MSVCR80 ref: 00BA80DD
strchr.MSVCR80 ref: 00BA810F
strchr.MSVCR80 ref: 00BA8126
tolower.MSVCR80 ref: 00BA8159
tolower.MSVCR80 ref: 00BA8165

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: strchr$tolower
String ID:
API String ID: 1960513771-0
Opcode ID: 3bc1fac9c88dc5b406e4831e62d79419a7240a4d90d1f0170542af733c83f537
Instruction ID: 7c5f4c7b63ab4aeeaa1ca55ecce97a04c372210236b27878b8b870c5609ef2f3
Opcode Fuzzy Hash: 3bc1fac9c88dc5b406e4831e62d79419a7240a4d90d1f0170542af733c83f537
Instruction Fuzzy Hash: 5A310C729483065BCB20DEA4ACC175AB7D5EF9A311F08056AEE04A7600FE71D94A87A1

Function 00506EF0 Relevance: 7.6, APIs: 5, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

_DebugHeapAllocator.LIBCPMTD ref: 00506F28

Part of subcall function 0040EA00: _DebugHeapAllocator.LIBCPMTD ref: 0040EA0E

??2@YAPAXI@Z.MSVCR80(00000004,00565168,4FF694EA,?,?,?,?,?,?,?,?,?,?,00539108,000000FF), ref: 00506F2F
codecvt.LIBCPMTD ref: 00506F9F
wcstol.MSVCR80 ref: 00506FEE
codecvt.LIBCPMTD ref: 00507011

Part of subcall function 00415BF0: ??3@YAXPAX@Z.MSVCR80(?,?,?,00415B3D,00000000,?,00415660,?,00000000,?,00415162,?,?,004141EC,00000000,?), ref: 00415C0B

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeapcodecvt$??2@??3@wcstol
String ID:
API String ID: 74129304-0
Opcode ID: f820b669af4b91f01ff1afac2cb9a1d8ae762e6116985bebba3912421fffcbed
Instruction ID: 6d66b3f1b8e0294eece4e25a7ed8cbe839a85e6d975fee0ec5976f71f30e8fe7
Opcode Fuzzy Hash: f820b669af4b91f01ff1afac2cb9a1d8ae762e6116985bebba3912421fffcbed
Instruction Fuzzy Hash: 7E4103B0D05209EFDB14DF94D895BEEBBB0BB48314F20852AE416AB2C0DB756A45CF94

Function 0046C100 Relevance: 7.6, APIs: 5, Instructions: 96stringCOMMON

Download Yara Rule

APIs

lstrlenW.KERNEL32(00000000,00569E8C), ref: 0046C121
WideCharToMultiByte.KERNEL32(?,00000000,00000000,?,?,00000000,00000000,00000000,00000080,00000000,0000007C,00000080), ref: 0046C16B
GetLastError.KERNEL32(?,00000000,00000000,00000000,00000080,00000000,0000007C,00000080), ref: 0046C17D
WideCharToMultiByte.KERNEL32(?,00000000,00000000,?,00000000,00000000,00000000,00000000,?,00000000,00000000,00000000,00000080,00000000,0000007C,00000080), ref: 0046C19E
WideCharToMultiByte.KERNEL32(?,00000000,00000000,?,?,00000000,00000000,00000000,00000080,00000000,0000007C,00000080,?,00000000,00000000,00000000), ref: 0046C1DC

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: ByteCharMultiWide$ErrorLastlstrlen
String ID:
API String ID: 3322701435-0
Opcode ID: cbcd1fa559f8ae4230e768bd00e513c0907913d8661ee28b925d20b683ff2109
Instruction ID: c9f41260a9b7f310c3a2772d0b559dbbeee8ca943a5465fee336bfd2e85e9abf
Opcode Fuzzy Hash: cbcd1fa559f8ae4230e768bd00e513c0907913d8661ee28b925d20b683ff2109
Instruction Fuzzy Hash: E3310DB5A40208BFEB04DF94CC96FAF77B9FB48704F108549F615EB280D675A940DB94

Function 00405E10 Relevance: 7.6, APIs: 5, Instructions: 82COMMON

Download Yara Rule

APIs

cvCreateMat.CXCORE099(00000004,00000004,00000005), ref: 00405E22
cvCreateMat.CXCORE099(00000004,00000004,00000005,00000004,00000004,00000005), ref: 00405E2F

Part of subcall function 004052F0: cvSet.CXCORE099(?,?,?,?,?,?,00000000,?,00401783), ref: 0040530E

cvGEMM.CXCORE099(00000000,?), ref: 00405E67
cvCopy.CXCORE099(00000000,00000000,00000000,00000000,?), ref: 00405E70
cvScaleAdd.CXCORE099(00000000), ref: 00405EC9

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Create$CopyScale
String ID:
API String ID: 461463502-0
Opcode ID: 9b155aa8d9b7d350014ff22c71609d5e50d78062370eef75407f380a65ed93fa
Instruction ID: 243994d87a2382b29a994a3e478baa9f1873f37bc1af83bd278c7c66fdfcfe6b
Opcode Fuzzy Hash: 9b155aa8d9b7d350014ff22c71609d5e50d78062370eef75407f380a65ed93fa
Instruction Fuzzy Hash: 322129B2E0061076D7103B65DC4BB577B68DF40754F410869FE84AB2E2F97289208BD6

Function 00BAA7E0 Relevance: 7.6, APIs: 5, Instructions: 66COMMON

Download Yara Rule

APIs

isdigit.MSVCR80 ref: 00BAA7F2
isspace.MSVCR80 ref: 00BAA82B
isspace.MSVCR80 ref: 00BAA83E
isdigit.MSVCR80 ref: 00BAA848
isdigit.MSVCR80 ref: 00BAA87A

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: isdigit$isspace
String ID:
API String ID: 4135990190-0
Opcode ID: 036367f376c989b9c34041e79a5fb3df868b207ff404e4af573843fcfb659560
Instruction ID: a240fb2a08604fd8e568b7ff7aebfbe8f5a42f04fefad98d5dec034133ce5822
Opcode Fuzzy Hash: 036367f376c989b9c34041e79a5fb3df868b207ff404e4af573843fcfb659560
Instruction Fuzzy Hash: 0011A170B082185BEB212B255CC557F32D9DE43358F0800B4EC12DB252FB099E1AC2FB

Function 00520C30 Relevance: 7.5, APIs: 5, Instructions: 30synchronizationCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?,?,?,004BA32E,00000000,?,?,004B95C5,00000000,00000000,?,000000FF,?,00000000,?,?), ref: 00520C38
LeaveCriticalSection.KERNEL32(?,?,?,004BA32E,00000000,?,?,004B95C5,00000000,00000000,?,000000FF,?,00000000,?,?), ref: 00520C45
SetEvent.KERNEL32(0000000A,?,?,004BA32E,00000000,?,?,004B95C5,00000000,00000000,?,000000FF,?,00000000,?,?), ref: 00520C60
WaitForSingleObject.KERNEL32(00000000,000000FF,?,?,004BA32E,00000000,?,?,004B95C5,00000000,00000000,?,000000FF,?,00000000,?), ref: 00520C6C
LeaveCriticalSection.KERNEL32(?,?,?,004BA32E,00000000,?,?,004B95C5,00000000,00000000,?,000000FF,?,00000000,?,?), ref: 00520C76

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: CriticalSection$Leave$EnterEventObjectSingleWait
String ID:
API String ID: 2480823239-0
Opcode ID: 69de553fff6750679b5045ee798069faca8b5646966b91e150a6d47a83d5acfd
Instruction ID: 20fc61db396638aa89e1fa09a044bcff496ff3b65396fda0f4d22a802af35d76
Opcode Fuzzy Hash: 69de553fff6750679b5045ee798069faca8b5646966b91e150a6d47a83d5acfd
Instruction Fuzzy Hash: 12F05E761002109BD320DB19EC4899BF7B8EFE5731B008A1EF66693760C774A84ADB50

Function 0048B460 Relevance: 7.5, APIs: 5, Instructions: 29COMMON

Download Yara Rule

APIs

?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ.MSVCP80(00000000,00000000,?,0047AE1E), ref: 0048B46C
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z.MSVCP80(?,?,0047AE1E), ref: 0048B47E
?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ.MSVCP80(?,0047AE1E), ref: 0048B487
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ.MSVCP80(?,0047AE1E), ref: 0048B497
?at@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z.MSVCP80(00000000,?,0047AE1E), ref: 0048B4A7

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: U?$char_traits@_V?$allocator@_W@2@@std@@W@std@@$?at@?$basic_string@_?empty@?$basic_string@_?resize@?$basic_string@_?size@?$basic_string@D@2@@std@@D@std@@Myptr@?$basic_string@_U?$char_traits@V?$allocator@
String ID:
API String ID: 4057328569-0
Opcode ID: c7ba979821146be9279d2770a084e86471b0649c4ca3e01649a5b532db9d5204
Instruction ID: d80ad3f19352604951a50fa2e2320d740545fe158bc114347127201c31090748
Opcode Fuzzy Hash: c7ba979821146be9279d2770a084e86471b0649c4ca3e01649a5b532db9d5204
Instruction Fuzzy Hash: 20F05434901208EFDF04DF94E9969ACBBB5FF54301F1040A9E906A7362CB306F54EB94

Function 00BA17E0 Relevance: 7.5, APIs: 5, Instructions: 26COMMON

Download Yara Rule

APIs

AVIStreamRelease.AVIFIL32(?,00BA1845), ref: 00BA17EC
AVIStreamRelease.AVIFIL32(?,00BA1845), ref: 00BA17F9
AVIStreamRelease.AVIFIL32(?,00BA1845), ref: 00BA1805
cvReleaseImage.CXCORE099(?,00BA1845), ref: 00BA180E
memset.MSVCR80 ref: 00BA1818

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Release$Stream$Imagememset
String ID:
API String ID: 1141295433-0
Opcode ID: 9b10a1fac828d35d3803fb3ec6bc7492a8297132dec4526e2ec142395d89f5c7
Instruction ID: 5b7d74ce02844bc19dfee1ab9297c02fbf74dbadab035d101c7f533f09f518b3
Opcode Fuzzy Hash: 9b10a1fac828d35d3803fb3ec6bc7492a8297132dec4526e2ec142395d89f5c7
Instruction Fuzzy Hash: 50E04FA4B0471626DA70BA7A8C82F2772DCAF01B40F480CD87695E7156EB28E9048264

Function 0042C9B0 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 118memoryCOMMON

Download Yara Rule

APIs

_DebugHeapAllocator.LIBCPMTD ref: 0042C9E5
_DebugHeapAllocator.LIBCPMTD ref: 0042C9F7

Part of subcall function 0042F960: _invalid_parameter_noinfo.MSVCR80(-0000003E,?,004AB3E0,00000000,0000000A,00000001,4FF694EA,000000FF,?,004AB79D), ref: 0042F974

Part of subcall function 0042E150: _DebugHeapAllocator.LIBCPMTD ref: 0042E198
Part of subcall function 0042E150: _DebugHeapAllocator.LIBCPMTD ref: 0042E1D1
Part of subcall function 0042E150: _DebugHeapAllocator.LIBCPMTD ref: 0042E203
Part of subcall function 0042E150: _DebugHeapAllocator.LIBCPMTD ref: 0042E23C
Part of subcall function 0042E150: _DebugHeapAllocator.LIBCPMTD ref: 0042E258
Part of subcall function 0042E150: GetDateFormatW.KERNEL32(00000400,00000000,?,00000000,?,00000400), ref: 0042E295
Part of subcall function 0042E150: _DebugHeapAllocator.LIBCPMTD ref: 0042E2A5

Strings

www.manycam.com, xrefs: 0042CAF2
www.manycam.com, xrefs: 0042CADE

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$DateFormat_invalid_parameter_noinfo
String ID: www.manycam.com$www.manycam.com
API String ID: 553431348-1145362033
Opcode ID: 907b669c7419f88507c8a825532ba4f2d68d0285e46d80b14031e18f66ef58df
Instruction ID: 55a663fd7b0127f2866d6ce172646f00f7e0cf50757378cb7dafc49b07509b25
Opcode Fuzzy Hash: 907b669c7419f88507c8a825532ba4f2d68d0285e46d80b14031e18f66ef58df
Instruction Fuzzy Hash: 47414271A001199BCB08DB99E891BEEB7B5FF48318F54412EE212B7391DB385944CBA9

Function 00473410 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 116COMMON

Download Yara Rule

APIs

Part of subcall function 00416740: _DebugHeapAllocator.LIBCPMTD ref: 00416795

Part of subcall function 00474150: _DebugHeapAllocator.LIBCPMTD ref: 00474184

Concurrency::details::ContextBase::GetWorkQueueIdentity.LIBCMTD ref: 004734D8
Concurrency::details::ContextBase::GetWorkQueueIdentity.LIBCMTD ref: 004734ED

Strings

Unspecified error., xrefs: 00473445
Success., xrefs: 0047356D

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorBase::Concurrency::details::ContextDebugHeapIdentityQueueWork
String ID: Success.$Unspecified error.
API String ID: 1131629171-706436185
Opcode ID: b3f4d17c8da6cdcfc0b6d0ff55324c749d524ae8afab65f8b4ff8dddb847087a
Instruction ID: bc827c14786d1c61271ce0a8054c91633283c620aa6f54ee5145cccaa2d137c5
Opcode Fuzzy Hash: b3f4d17c8da6cdcfc0b6d0ff55324c749d524ae8afab65f8b4ff8dddb847087a
Instruction Fuzzy Hash: BA417071801148EECB04EBD5D956BEEBBB4EF14308F10815EE416771D1EB782B08CBA6

Function 004B1320 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 109COMMON

Download Yara Rule

APIs

Part of subcall function 00438A10: clock.MSVCR80 ref: 00438AA7
Part of subcall function 00438A10: _DebugHeapAllocator.LIBCPMTD ref: 00438AC5

_Smanip.LIBCPMTD ref: 004B1372

Part of subcall function 00520530: memset.MSVCR80 ref: 00520538

_Smanip.LIBCPMTD ref: 004B1421

Part of subcall function 005204F0: CoTaskMemFree.OLE32(?,?,004B1A46,000000FF,000000FF,?,?,?,?,4FF694EA), ref: 005204FD

Part of subcall function 00438AF0: clock.MSVCR80 ref: 00438B1F

Strings

vids, xrefs: 004B13DA
CGraphMgr::GetCameraResolution, xrefs: 004B1351

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Smanipclock$AllocatorDebugFreeHeapTaskmemset
String ID: CGraphMgr::GetCameraResolution$vids
API String ID: 3774843521-3834299117
Opcode ID: 57f87322dc0667cbc6c92d53d1968dbb6fd63cc6e5eefb218d5141586365d371
Instruction ID: e56a76c056f848615ba6731e9865e0c3898b4e488a6d99c30ba1f2ebbdeffdb9
Opcode Fuzzy Hash: 57f87322dc0667cbc6c92d53d1968dbb6fd63cc6e5eefb218d5141586365d371
Instruction Fuzzy Hash: 45411A70900209DFCB14DF95D991BDEBBB4BF48304F50819EE509AB392DB34AA45CFA4

Function 00418180 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 91windowCOMMON

Download Yara Rule

APIs

SendMessageW.USER32(00000000,?,0000004E,00000000), ref: 004181E3
SendMessageW.USER32(00000000,?,00000111), ref: 00418234

Part of subcall function 004182A0: GetDlgCtrlID.USER32(?), ref: 004182AD

Part of subcall function 004065F0: GetParent.USER32(?), ref: 004065FD

Strings

open, xrefs: 00418249

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: MessageSend$CtrlParent
String ID: open
API String ID: 1383977212-2758837156
Opcode ID: 01cc08d3ab3f4a93a3031a1c368f21ad3e1f66622c4ad21caec5fa85ffc382d2
Instruction ID: c0f4561a2c49f87f87505e6ad243b5dafbf5b9024aec12e38c733bc4d86155cd
Opcode Fuzzy Hash: 01cc08d3ab3f4a93a3031a1c368f21ad3e1f66622c4ad21caec5fa85ffc382d2
Instruction Fuzzy Hash: FD313E70A042599FEF08DBA5DC51BFEBBB5BF48304F14415DE506B73C2CA38A9418B69

Function 0040D710 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 89memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 00406640: GetDlgItem.USER32(?,00000000), ref: 00406651

_DebugHeapAllocator.LIBCPMTD ref: 0040D74B

Part of subcall function 004167C0: _DebugHeapAllocator.LIBCPMTD ref: 004167CE

Part of subcall function 0040E970: GetWindowRect.USER32(?,?), ref: 0040E981

MoveWindow.USER32(00000064,00000000,00000000,?,?,00000000,?,0053D874,00000000,?,00000499), ref: 0040D7C2

Part of subcall function 0040E950: SendMessageW.USER32(00000000,00000445,?,0040D7DD), ref: 0040E963

Part of subcall function 0040EFF0: SendMessageW.USER32(?,000000C5,00000000,00000000), ref: 0040F008

Part of subcall function 0040E990: SetFocus.USER32(?,?,?,00434E57,?,00000000,?), ref: 0040E99D

Part of subcall function 004065F0: GetParent.USER32(?), ref: 004065FD

Part of subcall function 00406670: GetParent.USER32 ref: 0040669A
Part of subcall function 00406670: GetWindowRect.USER32(?,?), ref: 004066C0
Part of subcall function 00406670: GetWindowLongW.USER32(00000000,000000F0), ref: 004066DD
Part of subcall function 00406670: SystemParametersInfoW.USER32(00000030,00000000,?,00000000), ref: 0040670D

Strings

d, xrefs: 0040D765
d, xrefs: 0040D75E

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Window$AllocatorDebugHeapMessageParentRectSend$FocusInfoItemLongMoveParametersSystem
String ID: d$d
API String ID: 3921613472-195624457
Opcode ID: be6d5f90de31245e1e353859d4c1b30396a498e5700c83b75fcdaf14fb3ee6aa
Instruction ID: 3ca6db3b2f9967b65cd4f0e061b2cad756e61815fc9b19dab2999dc164d22b62
Opcode Fuzzy Hash: be6d5f90de31245e1e353859d4c1b30396a498e5700c83b75fcdaf14fb3ee6aa
Instruction Fuzzy Hash: F3312D71A01109AFDB04DFEDD995FAEB7B6AF48308F14455CF202B72C1CA74AA10CB68

Function 00BA5540 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 77COMMON

Download Yara Rule

APIs

memcpy.MSVCR80(?,?,?,76933EB0,?,?,00BA5D3F,?), ref: 00BA55D3
sprintf.MSVCR80 ref: 00BA55FD
SetWindowTextA.USER32(?,?), ref: 00BA560F

Strings

%s: %d, xrefs: 00BA55F7

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: TextWindowmemcpysprintf
String ID: %s: %d
API String ID: 457325812-423524997
Opcode ID: 18c03759c09884d7345dda276476f844e4916c6926e7b6161b805d56213399c1
Instruction ID: 49eaaa3a848421e8866e97ca15eb50e8fb82d31ed0b486a5c08a066b846b79b5
Opcode Fuzzy Hash: 18c03759c09884d7345dda276476f844e4916c6926e7b6161b805d56213399c1
Instruction Fuzzy Hash: EE21D1755087409FC320CF29D881977BBF9EFA9304B04C99CE88A8B351E775EA45DB52

Function 00BDC690 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 76fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,-80000000,00000001,00000000,00000002,00000001,00000000), ref: 00BDC707
CloseHandle.KERNEL32(00000000), ref: 00BDC73F

Strings

TIFFOpen, xrefs: 00BDC697, 00BDC71A
%s: Cannot open, xrefs: 00BDC715

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: CloseCreateFileHandle
String ID: %s: Cannot open$TIFFOpen
API String ID: 3498533004-4026200435
Opcode ID: 5d11a03dc72d5ea40e2e469ab0b71a215c41384c9510a8b67be5afa232ff7464
Instruction ID: 7ac8c7733f661b8d83206a0af98329a585088478813e794eaf70b7a29356634d
Opcode Fuzzy Hash: 5d11a03dc72d5ea40e2e469ab0b71a215c41384c9510a8b67be5afa232ff7464
Instruction Fuzzy Hash: 391129A63401022BEB2411389C8AF7B8ACAC3D1321F2455B7F616D73D2F668CC05D162

Function 0041D690 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 71COMMON

Download Yara Rule

Strings

Error opening properties for this camera., xrefs: 0041D751
Error, xrefs: 0041D74C

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID:
String ID: Error$Error opening properties for this camera.
API String ID: 0-2118436274
Opcode ID: 19554b0057f9a520c76bc3dad455c1dc10b7e99a60b9304a2b7680d00d384350
Instruction ID: 147417b0d663a9565f7becfaf8392b6f7256af2672039c8dcafe371fef67c71d
Opcode Fuzzy Hash: 19554b0057f9a520c76bc3dad455c1dc10b7e99a60b9304a2b7680d00d384350
Instruction Fuzzy Hash: 1B212CB0D00208EFDB04EFA5DD92BEEBBB4EB04718F10052EE416A72D1DB786945DB95

Function 00438A10 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 65memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 004B77A0: fwprintf.MSVCR80 ref: 004B7842
Part of subcall function 004B77A0: fflush.MSVCR80 ref: 004B7852

clock.MSVCR80 ref: 00438AA7
_DebugHeapAllocator.LIBCPMTD ref: 00438AC5

Strings

ob@, xrefs: 00438A20
>>> Entering: %s, xrefs: 00438A91

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeapclockfflushfwprintf
String ID: >>> Entering: %s$ob@
API String ID: 1338021872-1849792878
Opcode ID: 096be4365fe6ecaff6f57c3d342fa79fd521a6c5a1afd4c32245b02c1f24962e
Instruction ID: e5c4b020fe9bb3bd421ac8dd4bd2dede87d7f0cb66a8b34f549f2a89e30843bb
Opcode Fuzzy Hash: 096be4365fe6ecaff6f57c3d342fa79fd521a6c5a1afd4c32245b02c1f24962e
Instruction Fuzzy Hash: 9D216075900209AFDB04EF94C942AEEBB74FF44718F10852DF816A73C1DB746A04CBA5

Function 00BA5E30 Relevance: 7.0, APIs: 1, Strings: 3, Instructions: 34COMMON

Download Yara Rule

APIs

cvError.CXCORE099(000000E5,cvGetTrackbarPos,NULL trackbar or window name,.\window_w32.cpp,0000057F), ref: 00BA5E77

Strings

NULL trackbar or window name, xrefs: 00BA5E6B
.\window_w32.cpp, xrefs: 00BA5E66
cvGetTrackbarPos, xrefs: 00BA5E70

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Error
String ID: .\window_w32.cpp$NULL trackbar or window name$cvGetTrackbarPos
API String ID: 2619118453-2331188912
Opcode ID: 78ca810e5033d0a5d6fa2a3a93686b2f9622e90d4ac7b60946cdc1944e751dbf
Instruction ID: 0f08c963d5548ac35ff337ad7e104a5a73786107efb1fd7e7718319639730ff5
Opcode Fuzzy Hash: 78ca810e5033d0a5d6fa2a3a93686b2f9622e90d4ac7b60946cdc1944e751dbf
Instruction Fuzzy Hash: 32E02B7270C6201B45307A2D9C4295B73C9DEC2B71B1902E6BE28A71D1E761DE0442A1

Function 00BA5DE0 Relevance: 7.0, APIs: 1, Strings: 3, Instructions: 22COMMON

Download Yara Rule

APIs

cvError.CXCORE099(000000E5,cvSetMouseCallback,NULL window name,.\window_w32.cpp,00000566), ref: 00BA5DFF

Strings

.\window_w32.cpp, xrefs: 00BA5DEE
NULL window name, xrefs: 00BA5DF3
cvSetMouseCallback, xrefs: 00BA5DF8

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Error
String ID: .\window_w32.cpp$NULL window name$cvSetMouseCallback
API String ID: 2619118453-1583835266
Opcode ID: 2f6e8dc752373954e1134c9560805940ad040357a3496be1cf1178e2ce2bf88d
Instruction ID: f16149feb6b409c72ac3dd0578d23ee075b73c940e28acf2040f0ac6b78c615e
Opcode Fuzzy Hash: 2f6e8dc752373954e1134c9560805940ad040357a3496be1cf1178e2ce2bf88d
Instruction Fuzzy Hash: 2FE026B0A8C3202F8B209F05BC01E5B33D09BC5720F0646C9F8096B2E0E7B0DE008AE8

Function 00BC4890 Relevance: 6.3, APIs: 1, Strings: 3, Instructions: 341COMMON

Download Yara Rule

APIs

sprintf.MSVCR80 ref: 00BC48BC

Strings

NULL row buffer for row %ld, pass %d, xrefs: 00BC48B6
png_do_dither returned rowbytes=0, xrefs: 00BC4B11
png_do_rgb_to_gray found nongray pixel, xrefs: 00BC49A7, 00BC49BE

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: sprintf
String ID: NULL row buffer for row %ld, pass %d$png_do_dither returned rowbytes=0$png_do_rgb_to_gray found nongray pixel
API String ID: 590974362-2735929073
Opcode ID: 30343dc83746f4667523a8c1aa1251158f4e55241229d18dcc640905b9d53689
Instruction ID: ca24744fb1777b731dc2a0fd214df47bd0117d5ddfdc1fb7ce05855bf52a9524
Opcode Fuzzy Hash: 30343dc83746f4667523a8c1aa1251158f4e55241229d18dcc640905b9d53689
Instruction Fuzzy Hash: 02D14E75500B409BE72ADA34C895FF7B3E8EF55304F04894CE9EB46251E7B1BA46C760

Function 00418380 Relevance: 6.3, APIs: 4, Instructions: 316windowCOMMON

Download Yara Rule

APIs

GetFocus.USER32 ref: 004186F4

Part of subcall function 00408360: lstrlenW.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 004083C6
Part of subcall function 00408360: CompareStringW.KERNEL32(00000400,00000001,?,00000003,<A>,00000003), ref: 00408424
Part of subcall function 00408360: CompareStringW.KERNEL32(00000400,00000001,?,00000004,</A>,00000004), ref: 00408474

Part of subcall function 004078E0: GetClientRect.USER32(?,00000000), ref: 004078F1

Part of subcall function 00418A60: SetBkMode.GDI32(?,00000001), ref: 00418A71

Part of subcall function 00418A40: SelectObject.GDI32(?,?), ref: 00418A51

GetSysColor.USER32(00000011), ref: 004184AA

Part of subcall function 00418810: DeleteDC.GDI32(00000000), ref: 00418824

GetFocus.USER32 ref: 0041858A

Part of subcall function 00418AF0: DrawTextW.USER32(00000000,?,00000000,?,000000FF), ref: 00418B0D

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: CompareFocusString$ClientColorDeleteDrawModeObjectRectSelectTextlstrlen
String ID:
API String ID: 1926319676-0
Opcode ID: 26e55d2ddd3d839f70efe0ddea58adb9d72dd7b4482a26fa95ec74e06393aeaf
Instruction ID: 8fd3581a3690b51667abaed722c69e7692ca1fee28cda492897b23429118541a
Opcode Fuzzy Hash: 26e55d2ddd3d839f70efe0ddea58adb9d72dd7b4482a26fa95ec74e06393aeaf
Instruction Fuzzy Hash: DCD1FA719002089FDB08DF95C891AEEBBB5FF48344F14811EE5166B392DF39A985CF94

Function 004731C0 Relevance: 6.2, APIs: 4, Instructions: 177memoryCOMMON

Download Yara Rule

APIs

_DebugHeapAllocator.LIBCPMTD ref: 0047326B
_DebugHeapAllocator.LIBCPMTD ref: 004732C6

Part of subcall function 0040EDB0: _DebugHeapAllocator.LIBCPMTD ref: 0040EDE7

_DebugHeapAllocator.LIBCPMTD ref: 00473373
_DebugHeapAllocator.LIBCPMTD ref: 004733BF

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap
String ID:
API String ID: 571936431-0
Opcode ID: 8d22956a6eca960c08d3dff8719a7386b74edfd0f08a11446174f923434c786a
Instruction ID: ba553dcd13a5858e603f1fb76aea40c35e3a739926aa5d8f94fbf40c4e6c359d
Opcode Fuzzy Hash: 8d22956a6eca960c08d3dff8719a7386b74edfd0f08a11446174f923434c786a
Instruction Fuzzy Hash: 38716C71D04248EFCB08EFA5C891BEEBBB1AF44304F10856EE416BB2D1DB385A05CB94

Function 004377F0 Relevance: 6.1, APIs: 4, Instructions: 141COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::GetPolicy.LIBCMTD ref: 00437873

Part of subcall function 004DB530: _DebugHeapAllocator.LIBCPMTD ref: 004DB54A

Concurrency::details::SchedulerBase::GetPolicy.LIBCMTD ref: 00437893
Concurrency::task_options::get_scheduler.LIBCPMTD ref: 00437911
Concurrency::task_options::get_scheduler.LIBCPMTD ref: 00437931

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Base::Concurrency::details::Concurrency::task_options::get_schedulerPolicyScheduler$AllocatorDebugHeap
String ID:
API String ID: 3769596188-0
Opcode ID: ae50dedc5bff3189a4c5ee1f5f7d387c5ef5596cba0e4c588fdb73d77bb84b94
Instruction ID: e04cd424ada27803d4de57edeb00dc09ccd5da108a2e1a4cd45ff0b3344883ed
Opcode Fuzzy Hash: ae50dedc5bff3189a4c5ee1f5f7d387c5ef5596cba0e4c588fdb73d77bb84b94
Instruction Fuzzy Hash: 2551C9B1D052089BCB08EFD5D851AEEBBB5EF48304F10816EE415AB391DB386905CB95

Function 00BA2660 Relevance: 6.1, APIs: 4, Instructions: 131windowCOMMON

Download Yara Rule

APIs

cvGetImageROI.CXCORE099(?,?), ref: 00BA26C7
SetStretchBltMode.GDI32(?,00000003), ref: 00BA275A
?Bpp@CvvImage@@QAEHXZ.HIGHGUI099(?), ref: 00BA2769
StretchDIBits.GDI32(?,?,?,?,?,?,?,?,?,00000000,?,00000000,00CC0020), ref: 00BA27BA

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Stretch$BitsBpp@ImageImage@@Mode
String ID:
API String ID: 903276727-0
Opcode ID: fccf658962b61a90bdc990b6ea7bf4df399ce2061e3d38c4ba09ae029f1707a8
Instruction ID: 985ba766b442c3c9862aaf1c1a1be28407a68c4b0bd6865037957b9ccbf8dae6
Opcode Fuzzy Hash: fccf658962b61a90bdc990b6ea7bf4df399ce2061e3d38c4ba09ae029f1707a8
Instruction Fuzzy Hash: 3841DFB5608200AFC314DF68C884D2BB7E9EB89714F158A5DF69987361D730ED05CBA6

Function 005128B0 Relevance: 6.1, APIs: 4, Instructions: 129memoryCOMMON

Download Yara Rule

APIs

_DebugHeapAllocator.LIBCPMTD ref: 005128FB
_DebugHeapAllocator.LIBCPMTD ref: 0051292B
_DebugHeapAllocator.LIBCPMTD ref: 00512953
_DebugHeapAllocator.LIBCPMTD ref: 0051297B

Part of subcall function 004CB0F0: _DebugHeapAllocator.LIBCPMTD ref: 004CB139
Part of subcall function 004CB0F0: _DebugHeapAllocator.LIBCPMTD ref: 004CB155
Part of subcall function 004CB0F0: _DebugHeapAllocator.LIBCPMTD ref: 004CB171
Part of subcall function 004CB0F0: _DebugHeapAllocator.LIBCPMTD ref: 004CB1A3
Part of subcall function 004CB0F0: _DebugHeapAllocator.LIBCPMTD ref: 004CB1D6

Part of subcall function 0050E580: wcscpy.MSVCR80 ref: 0050E5EC
Part of subcall function 0050E580: wcscpy.MSVCR80 ref: 0050E623

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$wcscpy
String ID:
API String ID: 147117728-0
Opcode ID: d0bbc9be73f287d5b3265cda2ea85270813d23556e8a0590b6fb4fd8d4f8cf1c
Instruction ID: 4db675f979ab1b4fcf933bf1fc0f7ec6c4e65dab18244cadebc46eb2865c177d
Opcode Fuzzy Hash: d0bbc9be73f287d5b3265cda2ea85270813d23556e8a0590b6fb4fd8d4f8cf1c
Instruction Fuzzy Hash: FF512AB0906259DFEB14DF58D899BAEBBB5BF48304F1042EDE409A7281C7385E44CF95

Function 004DBFF0 Relevance: 6.1, APIs: 4, Instructions: 119memoryCOMMON

Download Yara Rule

APIs

_DebugHeapAllocator.LIBCPMTD ref: 004DC033

Part of subcall function 004DBE90: _DebugHeapAllocator.LIBCPMTD ref: 004DBEC9

_DebugHeapAllocator.LIBCPMTD ref: 004DC086

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap
String ID:
API String ID: 571936431-0
Opcode ID: c59892185d700c258966fea98a3a67c139e76443b60bb6cbe48b80099f68f78a
Instruction ID: 57ad7a94b4f17953cceabe80b37dddf1255517824b701b9908fe33c64e9df595
Opcode Fuzzy Hash: c59892185d700c258966fea98a3a67c139e76443b60bb6cbe48b80099f68f78a
Instruction Fuzzy Hash: 855108B1D01209EFCB04DF98D991BEEBBB5EF48314F20821EE415A7381D7786A05CBA5

Function 004DBE90 Relevance: 6.1, APIs: 4, Instructions: 106memoryCOMMON

Download Yara Rule

APIs

_DebugHeapAllocator.LIBCPMTD ref: 004DBEC9

Part of subcall function 004DBD20: Concurrency::details::SchedulerBase::GetPolicy.LIBCMTD ref: 004DBD89

??2@YAPAXI@Z.MSVCR80(00000020,00000000,?,4FF694EA,?,?,?,?,?,?,00000000,005360A4,000000FF,?,004DC043,?), ref: 004DBF07
_DebugHeapAllocator.LIBCPMTD ref: 004DBF32
codecvt.LIBCPMTD ref: 004DBF91

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$??2@Base::Concurrency::details::PolicySchedulercodecvt
String ID:
API String ID: 2274784594-0
Opcode ID: b34eaf5f8b4bc995a75b7663f0490cbbca256718e0fc2991ba0d564274ad3819
Instruction ID: a5f5fe00beb6dc335f7db01107ea1e8339e23b863d8d973fd5a3badf8319c300
Opcode Fuzzy Hash: b34eaf5f8b4bc995a75b7663f0490cbbca256718e0fc2991ba0d564274ad3819
Instruction Fuzzy Hash: 4241C3B1D00209EFCB04DF99D855BEEBBB5FB48314F10822EE825A7380D7786A41CB95

Function 004CB670 Relevance: 6.1, APIs: 4, Instructions: 105memoryCOMMON

Download Yara Rule

APIs

_DebugHeapAllocator.LIBCPMTD ref: 004CB6AA

Part of subcall function 004CDD10: _DebugHeapAllocator.LIBCPMTD ref: 004CDD47

_DebugHeapAllocator.LIBCPMTD ref: 004CB711
_DebugHeapAllocator.LIBCPMTD ref: 004CB76F
_DebugHeapAllocator.LIBCPMTD ref: 004CB787

Part of subcall function 0040EDB0: _DebugHeapAllocator.LIBCPMTD ref: 0040EDE7

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap
String ID:
API String ID: 571936431-0
Opcode ID: d8dd091d62933aa0e0d22cb533b24b345fb768a8967b578f071013b0fdbbec97
Instruction ID: 38e3a450d274fc90888437ce31c1c227629e1880207a410873065ac097306c4e
Opcode Fuzzy Hash: d8dd091d62933aa0e0d22cb533b24b345fb768a8967b578f071013b0fdbbec97
Instruction Fuzzy Hash: 9B411771D01109EFDB04EFA5C992BEEBBB4AF14304F10852EE512B72D1DB746A08CBA5

Function 00BA2160 Relevance: 6.1, APIs: 4, Instructions: 103COMMON

Download Yara Rule

APIs

cvLoadImage.HIGHGUI099(?,?), ref: 00BA218D
cvSetImageROI.CXCORE099(00000000), ref: 00BA221E
cvReleaseImage.CXCORE099(?), ref: 00BA2240
cvReleaseImage.CXCORE099(?), ref: 00BA2259

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Image$Release$Load
String ID:
API String ID: 1413804649-0
Opcode ID: a4d4840bee8ad4b3121e05d0b855a454b0eeaed213024734cef0bc68e88dd3e0
Instruction ID: 8ee6c43d6c349437992a00b80a4f1832b74c1ed43ee8c945cd0e2b51b3a4a814
Opcode Fuzzy Hash: a4d4840bee8ad4b3121e05d0b855a454b0eeaed213024734cef0bc68e88dd3e0
Instruction Fuzzy Hash: 0631CE766083058B8708DF58C98092BB3E6EFC9714B1585ADED499B301DB31ED4ACB91

Function 004233E0 Relevance: 6.1, APIs: 4, Instructions: 97COMMON

Download Yara Rule

APIs

Part of subcall function 0040DB90: EnableWindow.USER32(?,004233F6), ref: 0040DBA1

memset.MSVCR80 ref: 00423401

Part of subcall function 00424C20: SendMessageW.USER32(?,00000418,00000000,?), ref: 00424C38

memset.MSVCR80 ref: 00423472

Part of subcall function 00424CB0: SendMessageW.USER32(?,00000432,00000000,004234AC), ref: 00424CC8

GetSysColor.USER32(0000000D), ref: 004234AE

Part of subcall function 00424C50: SendMessageW.USER32(?,00000413,00000000,00000000), ref: 00424C68

GetSysColor.USER32(0000000E), ref: 004234C2

Part of subcall function 00424C80: SendMessageW.USER32(?,00000414,00000000,00000000), ref: 00424C98

Part of subcall function 00424BF0: SendMessageW.USER32(?,0000041A,00000000,00000000), ref: 00424C08

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: MessageSend$Colormemset$EnableWindow
String ID:
API String ID: 3254005938-0
Opcode ID: 9547226adb342bfd39b01646857f65c79a1ef8127a810dff08a050f6dd987676
Instruction ID: 106a6f500417accf57ea954c1e823afec406d325b5afcb2095aae49042dfd20f
Opcode Fuzzy Hash: 9547226adb342bfd39b01646857f65c79a1ef8127a810dff08a050f6dd987676
Instruction Fuzzy Hash: FF311270E441069BDB04DB99DCA2F7EB7B5AF88708F04811DF5157B3C2CA78A416CB69

Function 00BA12C0 Relevance: 6.1, APIs: 4, Instructions: 92COMMON

Download Yara Rule

APIs

Part of subcall function 00BA1230: AVIFileInit.AVIFIL32(00BA1F21), ref: 00BA1239

AVIFileOpenA.AVIFIL32(?,?,00000000,00000000), ref: 00BA12E1
AVIFileGetStream.AVIFIL32(?,?,73646976,00000000,?,?,00000000,00000000), ref: 00BA12FC
AVIStreamInfoA.AVIFIL32(00000000,?,0000008C,?,?,73646976,00000000,?,?,00000000,00000000), ref: 00BA1316
AVIStreamGetFrameOpen.AVIFIL32(?,?,00000000), ref: 00BA13A5

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: FileStream$Open$FrameInfoInit
String ID:
API String ID: 3655022341-0
Opcode ID: 798e82185fe2252666c15dcdf94da9dcdcd92ba170b08f7f3d16caa25067f82f
Instruction ID: 526a983df719811930e69464fe21b14cb649e372e427ef055a9798e4a0fcbd1f
Opcode Fuzzy Hash: 798e82185fe2252666c15dcdf94da9dcdcd92ba170b08f7f3d16caa25067f82f
Instruction Fuzzy Hash: 4B3180B5604300ABDB44DF69CDC1B9737E9EF49710F4485A9EE08CF24AEB71E9048BA5

Function 00406040 Relevance: 6.1, APIs: 4, Instructions: 85COMMON

Download Yara Rule

APIs

_CIsqrt.MSVCR80 ref: 00406080
_CIatan.MSVCR80 ref: 004060E0
_CIatan.MSVCR80 ref: 00406102
_CIatan.MSVCR80 ref: 00406126

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Iatan$Isqrt
String ID:
API String ID: 1025909456-0
Opcode ID: 57f5941b643651e987862c1e0d1d6f7d17b30a8860795f25dd51119af805d3df
Instruction ID: 369849f07fd1038270b353e5a516803fc2d99b3ba7736fd5bc0cfa9b85f71fc3
Opcode Fuzzy Hash: 57f5941b643651e987862c1e0d1d6f7d17b30a8860795f25dd51119af805d3df
Instruction Fuzzy Hash: 8631E671609302EFC701AF44E64816ABFA4FFC1751FA18D88E4E922199D73198758F8B

Function 00BA9800 Relevance: 6.1, APIs: 4, Instructions: 81fileCOMMON

Download Yara Rule

APIs

??2@YAPAXI@Z.MSVCR80(000001B0), ref: 00BA981E
??2@YAPAXI@Z.MSVCR80(000000C4,000001B0), ref: 00BA982D
_setjmp3.MSVCR80 ref: 00BA9857
fopen.MSVCR80 ref: 00BA987F

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: ??2@$_setjmp3fopen
String ID:
API String ID: 2836828308-0
Opcode ID: c2f428bff391877ce6c296463bbccd81bd55fb0032ca58f3daf0013742102651
Instruction ID: 9e4acf58de35c141cbe34c845cf4b6c3a3f107bfdd510e9686d27313a1848168
Opcode Fuzzy Hash: c2f428bff391877ce6c296463bbccd81bd55fb0032ca58f3daf0013742102651
Instruction Fuzzy Hash: C321F871A44304AFD310EF698842BAFF7E8FF46700F1485DAE95897341D775AA118BE1

Function 00403480 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

cvPyrDown.CV099(?,?,00000007,FFFFFFFE,?,?,?,0040176B,?,?), ref: 004034E8
cvPyrDown.CV099(?,?,00000007,?,?,00000007,FFFFFFFE,?,?,?,0040176B,?,?), ref: 004034F7
cvSobel.CV099(?,?,00000001,00000000,00000003,?,?,00000007,?,?,00000007,FFFFFFFE,?,?,?,0040176B), ref: 0040350A
cvSobel.CV099(?,?,00000000,00000001,00000003,?,?,00000001,00000000,00000003,?,?,00000007,?,?,00000007), ref: 0040351D

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: DownSobel
String ID:
API String ID: 2091289516-0
Opcode ID: 608739ef99aa2b8ac6037748a2c71a64cfb87480d08a35d0b3f2b324fed52bd1
Instruction ID: b26035920ab24ae20490de8e438dd73d2ed62edcb4c8bde505a6cb4d7121f0fe
Opcode Fuzzy Hash: 608739ef99aa2b8ac6037748a2c71a64cfb87480d08a35d0b3f2b324fed52bd1
Instruction Fuzzy Hash: 46215EB5700701ABD724DE28DD81F67B7E9BB88711F448929FA869B6D0C671F5018B10

Function 0050DF50 Relevance: 6.1, APIs: 4, Instructions: 77memoryCOMMON

Download Yara Rule

APIs

_DebugHeapAllocator.LIBCPMTD ref: 0050DF91
_DebugHeapAllocator.LIBCPMTD ref: 0050DFAD

Part of subcall function 0050E4A0: _DebugHeapAllocator.LIBCPMTD ref: 0050E4E3
Part of subcall function 0050E4A0: _DebugHeapAllocator.LIBCPMTD ref: 0050E4FF

?Decode@CxImage@@QAE_NPAEKK@Z.CXIMAGECRT(?,?,00000000,?,?,?,?), ref: 0050DFFE
??3@YAXPAX@Z.MSVCR80(000000FF,?,?,00000000,?,?,?,?), ref: 0050E00D

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap$??3@Decode@Image@@
String ID:
API String ID: 2750522454-0
Opcode ID: 769ab098ef2205272df9c02d6f4271a03703872ce89b94fc88ef9a4cb5e21456
Instruction ID: 3c37372c448fd1ff81ab42699f4e176843c1d29902be1aeb85d09944e11fd3e7
Opcode Fuzzy Hash: 769ab098ef2205272df9c02d6f4271a03703872ce89b94fc88ef9a4cb5e21456
Instruction Fuzzy Hash: 9B3118B1D05248EFCB04DFA8D985BDEBBB4FB48314F10861DF815A7281DB746A04CBA5

Function 00BD0EB0 Relevance: 6.1, APIs: 2, Strings: 2, Instructions: 74COMMON

Download Yara Rule

APIs

sprintf.MSVCR80 ref: 00BD0ED7
sprintf.MSVCR80 ref: 00BD0EED

Strings

sCAL, xrefs: 00BD0F14
%12.12e, xrefs: 00BD0ED1, 00BD0EE7

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: sprintf
String ID: %12.12e$sCAL
API String ID: 590974362-3005958862
Opcode ID: 62bb1b61913434532777b6440b6c6ec851d9ce78144c126b24bb9623834cec11
Instruction ID: de29aed9c5cd51d3f53fb724073b5a62d19a5d52635a4d9a5ee3ec36c488d90d
Opcode Fuzzy Hash: 62bb1b61913434532777b6440b6c6ec851d9ce78144c126b24bb9623834cec11
Instruction Fuzzy Hash: 9C1193B65147506E9304D664CC02CBF77E9EEC5320F040A5EF6A2632D1EBA5EA0587A6

Function 00BA7AB0 Relevance: 6.1, APIs: 4, Instructions: 54COMMON

Download Yara Rule

APIs

memcpy.MSVCR80(?,?,?), ref: 00BA7AC8
fseek.MSVCR80 ref: 00BA7AE7
fread.MSVCR80 ref: 00BA7AFB
longjmp.MSVCR80(?,00000085), ref: 00BA7B2C

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: freadfseeklongjmpmemcpy
String ID:
API String ID: 2772266533-0
Opcode ID: 0c88135b05231c8fb6ccc211ce4a28544036884e02b02780b75a941e40a2a411
Instruction ID: 2458c6abdc8c9416f244c093983ed7ec3dc28d52de8fd2a0a6b4bfbf5fc0ded7
Opcode Fuzzy Hash: 0c88135b05231c8fb6ccc211ce4a28544036884e02b02780b75a941e40a2a411
Instruction Fuzzy Hash: D9117CB1B18B10AFD724CB29DC44A6BB3E9EB89724B04491CE99683740DAB5F8448B54

Function 00446480 Relevance: 6.1, APIs: 4, Instructions: 51windowCOMMON

Download Yara Rule

APIs

GetTopWindow.USER32(?), ref: 0044648F
GetWindow.USER32(00000000,00000002), ref: 004464A0
SendMessageW.USER32(00000000,?,?,?), ref: 004464BF
GetTopWindow.USER32(00000000), ref: 004464CF

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Window$MessageSend
String ID:
API String ID: 1496643700-0
Opcode ID: 0fc2dd0073c28b6c66ec9f54719fca97d74c0b9b452a9e8b98ab4c061e3703d5
Instruction ID: 5599d8aec985cfa69e8589d1268fc08193e69a2bbc754be235a44f600a99598a
Opcode Fuzzy Hash: 0fc2dd0073c28b6c66ec9f54719fca97d74c0b9b452a9e8b98ab4c061e3703d5
Instruction Fuzzy Hash: 9411FA75A00208FFDB04DFE8D944EAE77B9AB88300F10855EFA0697390D734AE05DB69

Function 00491B50 Relevance: 6.0, APIs: 4, Instructions: 50COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.MSVCR80(?,000000FF,?,0048E333,0048B283,00495099,?,0048B283,000000FF,000000FF,00495099,4FF694EA,00531700,000000FF,?,00495099), ref: 00491B68
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ.MSVCP80(?,000000FF,?,0048E333,0048B283,00495099,?,0048B283,000000FF,000000FF,00495099,4FF694EA,00531700,000000FF,?,00495099), ref: 00491B83
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ.MSVCP80(?,0048E333,0048B283,00495099,?,0048B283,000000FF,000000FF,00495099,4FF694EA,00531700,000000FF,?,00495099,?), ref: 00491BA9
_invalid_parameter_noinfo.MSVCR80(?,0048E333,0048B283,00495099,?,0048B283,000000FF,000000FF,00495099,4FF694EA,00531700,000000FF,?,00495099,?), ref: 00491BB3

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Myptr@?$basic_string@_U?$char_traits@_V?$allocator@_W@2@@std@@W@std@@_invalid_parameter_noinfo
String ID:
API String ID: 2188846742-0
Opcode ID: cf415323ecff6b965b9dcc6927c72044f43967f3e5d630dff8fedc2412618fef
Instruction ID: 54e63703126b4be510269095b0d1381d719784210473edfb5369c30f1e79e64e
Opcode Fuzzy Hash: cf415323ecff6b965b9dcc6927c72044f43967f3e5d630dff8fedc2412618fef
Instruction Fuzzy Hash: 1C11C634A0000ADFCF14DF58C694CADBBB2EF99315B2182A9E9055B361EB34BF45DB84

Function 00BA3860 Relevance: 6.0, APIs: 4, Instructions: 46COMMON

Download Yara Rule

APIs

cvCreateImage.CXCORE099(?,?,?,?), ref: 00BA3878
cvReleaseImage.CXCORE099 ref: 00BA3895
??3@YAXPAX@Z.MSVCR80(?), ref: 00BA38A1
??2@YAPAXI@Z.MSVCR80(00000004), ref: 00BA38B1

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Image$??2@??3@CreateRelease
String ID:
API String ID: 387725118-0
Opcode ID: 33c0b4b4cfef9e54a189eedcd18104dc8b2f02f8c52caf8dacbe285785c2da59
Instruction ID: b48618c0517aa1ee8da95846e4f92321a4eb8ce295d623ff2f43381870a1ac60
Opcode Fuzzy Hash: 33c0b4b4cfef9e54a189eedcd18104dc8b2f02f8c52caf8dacbe285785c2da59
Instruction Fuzzy Hash: C7018FB29087019FE320DB29D941E17B7E9EF91B10F0449ADF49A83291EB74EC45C761

Function 00475460 Relevance: 6.0, APIs: 4, Instructions: 46COMMON

Download Yara Rule

APIs

DeleteDC.GDI32(00000000), ref: 00475479
DeleteObject.GDI32(00000000), ref: 0047548F
??3@YAXPAX@Z.MSVCR80(00000001,?), ref: 004754AB
memset.MSVCR80 ref: 004754E6

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Delete$??3@Objectmemset
String ID:
API String ID: 2240089121-0
Opcode ID: f775acb041dbfe5c56a33f25cd465f9aa31629570cacb76639abf9799f9fa6fa
Instruction ID: 33d3a3a66d25ed9f4d03f09c9153b39c32194220fa2733effb8460e3d87a6c1a
Opcode Fuzzy Hash: f775acb041dbfe5c56a33f25cd465f9aa31629570cacb76639abf9799f9fa6fa
Instruction Fuzzy Hash: 55112AB4A00208EFDB44DF94D888B9EBBB1FF84315F548098D9052B391D779EA85CF80

Function 004223E0 Relevance: 6.0, APIs: 4, Instructions: 43windowCOMMON

Download Yara Rule

APIs

memset.MSVCR80 ref: 00422406

Part of subcall function 004232A0: SendMessageW.USER32(?,00001004,00000000,00000000), ref: 004232B6

wcslen.MSVCR80 ref: 00422427
SendMessageW.USER32(?,0000104D,00000000,00000000), ref: 00422448
SendMessageW.USER32(?,0000100F,?,00000000), ref: 00422460

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: MessageSend$memsetwcslen
String ID:
API String ID: 1629969563-0
Opcode ID: 27b4e246d41088bd54c352e73dc6f3ec4014a33d544db1ace6c82cc66d73829c
Instruction ID: fd28faf10420b3e9cf0d4e7cd47fee78e406ddaa3a8982db2d9a389e17546391
Opcode Fuzzy Hash: 27b4e246d41088bd54c352e73dc6f3ec4014a33d544db1ace6c82cc66d73829c
Instruction Fuzzy Hash: F901E9B1D00208EBEB14DFD0EC8ABDEBBB5BB58704F044118F601AB391DB75A9058B95

Function 00403340 Relevance: 6.0, APIs: 4, Instructions: 37COMMON

Download Yara Rule

APIs

cvCreateMat.CXCORE099(00000004,00000004,00000005,00000000,00401253,?,?), ref: 00403347
cvCreateImage.CXCORE099(?,?,00000008,00000001,00401253,?,?), ref: 00403366
cvReleaseMat.CXCORE099(000000A4,00401253,?,?), ref: 0040337A
cvReleaseImage.CXCORE099(000000A0,00401253,?,?), ref: 00403388

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: CreateImageRelease
String ID:
API String ID: 3144300847-0
Opcode ID: ffbb64d3606a58d76dd273cbc426d93207a52b513e33f185116b626fbda38bd7
Instruction ID: 4452188ac5ececaf9476ffc26b46a09e5286b645042c6e493afe79c57806edd9
Opcode Fuzzy Hash: ffbb64d3606a58d76dd273cbc426d93207a52b513e33f185116b626fbda38bd7
Instruction Fuzzy Hash: 9DF0E0B5500312B6E7206F146C4AB9B7B94AF52301F040425FE44652C0FB749991C656

Function 00BA1250 Relevance: 6.0, APIs: 4, Instructions: 35COMMON

Download Yara Rule

APIs

AVIStreamGetFrameClose.AVIFIL32(?), ref: 00BA1260
AVIStreamRelease.AVIFIL32(?), ref: 00BA1270
AVIStreamRelease.AVIFIL32(?), ref: 00BA1280
memset.MSVCR80 ref: 00BA12AA

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: Stream$Release$CloseFramememset
String ID:
API String ID: 1615332947-0
Opcode ID: 74f3bb1eb6318d52f922f36249a1ed8ee939f265a6e7ebd6d421ff97f4babc2f
Instruction ID: 977265d0de9e61dd5e1f4a1ed212399eba31e2889ecfa0210e01e42471ac34ae
Opcode Fuzzy Hash: 74f3bb1eb6318d52f922f36249a1ed8ee939f265a6e7ebd6d421ff97f4babc2f
Instruction Fuzzy Hash: 12F067B4A04B109AC2209F2AC840E4BF7E9EFD2710F048E4EE1E9D3625C370E8408B10

Function 005212D0 Relevance: 6.0, APIs: 4, Instructions: 34threadCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?,?,?,?,004BA301,?,?,004B95C5,00000000,00000000,?,000000FF,?,00000000,?,?), ref: 005212D9
LeaveCriticalSection.KERNEL32(?,?,?,?,004BA301,?,?,004B95C5,00000000,00000000,?,000000FF,?,00000000,?,?), ref: 005212E6
CreateThread.KERNEL32(00000000,00000000,00521280,?,00000000,00000000), ref: 00521303
LeaveCriticalSection.KERNEL32(?,?,?,?,004BA301,?,?,004B95C5,00000000,00000000,?,000000FF,?,00000000,?,?), ref: 00521311

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: CriticalSection$Leave$CreateEnterThread
String ID:
API String ID: 2283434278-0
Opcode ID: 418f5b227edb57f9a6f757c2f81d22d4be826a1a10dd088fbaa45c80337aa0d5
Instruction ID: 8814811c4dcae3b6cb02d0e2ce8d72e62d21bf38926ec32fb9567c6bbb799682
Opcode Fuzzy Hash: 418f5b227edb57f9a6f757c2f81d22d4be826a1a10dd088fbaa45c80337aa0d5
Instruction Fuzzy Hash: 01F03E72201610AAE3705B55FC08BD77BB8EFD1B62F10051EF106D15D0D7A06445D765

Function 0041E370 Relevance: 6.0, APIs: 4, Instructions: 31COMMON

Download Yara Rule

APIs

GetSystemMetrics.USER32(0000004E), ref: 0041E37B
GetSystemMetrics.USER32(0000004F), ref: 0041E386
GetSystemMetrics.USER32(0000004C), ref: 0041E391
GetSystemMetrics.USER32(0000004D), ref: 0041E3A2

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: MetricsSystem
String ID:
API String ID: 4116985748-0
Opcode ID: 22b1d73353d5bc3e7bbfce1216fdfc9bbe2c5f0851a8470d3ca0ef857e634515
Instruction ID: 0309d501508c84c491e30ef2097f10fb6b95fe06418acfa07dbdd42ca1e239de
Opcode Fuzzy Hash: 22b1d73353d5bc3e7bbfce1216fdfc9bbe2c5f0851a8470d3ca0ef857e634515
Instruction Fuzzy Hash: 69018078E00209AFE704DF94E8499ACBBB1FF58300F1482AAEE5997781DB702A54DB45

Function 00488730 Relevance: 6.0, APIs: 4, Instructions: 23COMMON

Download Yara Rule

APIs

?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ.MSVCP80(?,?,00488724,4FF694EA,0049A100,4FF694E6,?,00487BE3,0049A0FC,-0000001C,?,0047AE82,?,00000000,?,?), ref: 00488737
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ.MSVCP80(?,00488724,4FF694EA,0049A100,4FF694E6,?,00487BE3,0049A0FC,-0000001C,?,0047AE82,?,00000000,?,?,0049A100), ref: 00488742
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z.MSVCP80(00000000,?,?,00488724,4FF694EA,0049A100,4FF694E6,?,00487BE3,0049A0FC,-0000001C,?,0047AE82,?,00000000,?), ref: 00488759
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z.MSVCP80(?,?,?,00488724,4FF694EA,0049A100,4FF694E6,?,00487BE3,0049A0FC,-0000001C,?,0047AE82,?,00000000,?), ref: 00488766

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: U?$char_traits@_V?$allocator@_W@2@@std@@W@std@@$Myptr@?$basic_string@_$??4?$basic_string@_?erase@?$basic_string@_V01@V01@@V12@
String ID:
API String ID: 3537912873-0
Opcode ID: 5056e8f042ebb5b06e388abe9d7013084b117bbf253dc20301d42485009f9af0
Instruction ID: 68c4d93e9c4a580dced358607109a40fa72366f08dc93a0fa3c65411e4fd161c
Opcode Fuzzy Hash: 5056e8f042ebb5b06e388abe9d7013084b117bbf253dc20301d42485009f9af0
Instruction Fuzzy Hash: 6CE01235200108AFEB14EF54EC58D99777BFB98391F008125FA0A8B362DB30AD44DB94

Function 00BA85C0 Relevance: 5.5, APIs: 2, Strings: 1, Instructions: 237COMMON

Download Yara Rule

APIs

_setjmp3.MSVCR80 ref: 00BA8610
memset.MSVCR80 ref: 00BA8735

Strings

$, xrefs: 00BA8648

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: _setjmp3memset
String ID: $
API String ID: 847497011-3993045852
Opcode ID: 63763e5d7813334aac782046e67f07ce29fbbd7646060a37f0e96c686d84a1f2
Instruction ID: a13de3c900da9ef4b23ff848c37500a9a2e224cc80a44c649d7bc22f47fad735
Opcode Fuzzy Hash: 63763e5d7813334aac782046e67f07ce29fbbd7646060a37f0e96c686d84a1f2
Instruction Fuzzy Hash: F591C470A0C6048BEF349A38C8957BEB7D1EB92304F68489ED4A6C7692DF749C448F52

Function 00BAB4B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 188COMMON

Download Yara Rule

APIs

_setjmp3.MSVCR80 ref: 00BAB500
memset.MSVCR80 ref: 00BAB609

Strings

VUUU, xrefs: 00BAB643

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: _setjmp3memset
String ID: VUUU
API String ID: 847497011-2040033107
Opcode ID: f5050c8e8717293726c5a1875846f33cd8a55907d53f46ba6494ce78174d4919
Instruction ID: 3acad619b03d5529180d426a0248c9de603377f97275682c5be23c18738ccae5
Opcode Fuzzy Hash: f5050c8e8717293726c5a1875846f33cd8a55907d53f46ba6494ce78174d4919
Instruction Fuzzy Hash: E461D671A087448BDB34DB78D8A5BBEB7E5EF96301F18449DE47A87242EB306848CF51

Function 00435780 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 159COMMON

Download Yara Rule

Strings

4NC, xrefs: 004357CB, 004359AB, 004357CE, 004359AE
4NC, xrefs: 0043598E, 004358D2

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID:
String ID: 4NC$4NC
API String ID: 0-1717309502
Opcode ID: 636313644eab2cc9ed53f4b1fb6c7fe5ccbcacf0ac8ecf14d2ef5cb6642a3b42
Instruction ID: edff85f3833ba22acf9ab8710c3cb5385f553245e4d39bd84e7972ae7c9abc0b
Opcode Fuzzy Hash: 636313644eab2cc9ed53f4b1fb6c7fe5ccbcacf0ac8ecf14d2ef5cb6642a3b42
Instruction Fuzzy Hash: 93616D70900508DFDB08EFA6D896BEEBBB5BF44318F10452EE5166B2D1DB782945CB88

Function 0050DC80 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 158memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 0050F800: _DebugHeapAllocator.LIBCPMTD ref: 0050F815

_DebugHeapAllocator.LIBCPMTD ref: 0050DCC9

Strings

MCE-, xrefs: 0050DEB2
_mAnnnYca@aM_, xrefs: 0050DDD5

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeap
String ID: MCE-$_mAnnnYca@aM_
API String ID: 571936431-899104912
Opcode ID: f40b280ed1325e6bba48490bd75d2d284572e43d25bd79c82fdd87b9afc39f8c
Instruction ID: 1e720448ac6b5cb3d8f353a52fb492bd5fc10a5b1a629d097a1df7f28f5dd433
Opcode Fuzzy Hash: f40b280ed1325e6bba48490bd75d2d284572e43d25bd79c82fdd87b9afc39f8c
Instruction Fuzzy Hash: 03715A30905258CBEB24DB54CD64FADBBB6BF61304F1482D8D5096B2C2CB75AE84CF65

Function 004B3190 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 157comCOMMON

Download Yara Rule

APIs

Part of subcall function 00438A10: clock.MSVCR80 ref: 00438AA7
Part of subcall function 00438A10: _DebugHeapAllocator.LIBCPMTD ref: 00438AC5

OleCreatePropertyFrame.OLEAUT32(?,00000000,00000000,?,00000001,?,00000000,?,00000000,00000000,00000000), ref: 004B335F
CoTaskMemFree.OLE32(?,?,?,4FF694EA), ref: 004B337C

Part of subcall function 00438AF0: clock.MSVCR80 ref: 00438B1F

Strings

CGraphMgr::ShowCameraProperties, xrefs: 004B31C1

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: clock$AllocatorCreateDebugFrameFreeHeapPropertyTask
String ID: CGraphMgr::ShowCameraProperties
API String ID: 2338886374-3071715877
Opcode ID: b892e083cea794b7bef9db6e71d19fafbfb14f69ee18f4ad05b9c8b3defac545
Instruction ID: 691d08390fa4834040d12ba73b1f3886b5f8bcf1a23ad6f21803c9f1b6b811bf
Opcode Fuzzy Hash: b892e083cea794b7bef9db6e71d19fafbfb14f69ee18f4ad05b9c8b3defac545
Instruction Fuzzy Hash: 7B611571904618DBDB14DF95CC95BEEB7B4BF48304F10419AE00AAB291DB786F84CFA4

Function 00BE3CE0 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 114COMMON

Download Yara Rule

APIs

Part of subcall function 00BDC870: GlobalAlloc.KERNEL32(00000000,00000000,00BDFB2A,00BE084E,?,?,?,00BE084E,?,?,00000000,?), ref: 00BDC877

_ftol.MSVCR80 ref: 00BE3DE5

Strings

No space to write RATIONAL array, xrefs: 00BE3D0B
"%s": Information lost writing value (%g) as (unsigned) RATIONAL, xrefs: 00BE3D7E

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: AllocGlobal_ftol
String ID: "%s": Information lost writing value (%g) as (unsigned) RATIONAL$No space to write RATIONAL array
API String ID: 2648542381-1820873451
Opcode ID: bbf5ac3ebcee3483d94711395227d2e3629a2e9d851a8396f5b6afdbe34653f3
Instruction ID: 40f6394cd010e1c25d9c9baecabc646536c3f4ec96bb24493a71287d3a4d0514
Opcode Fuzzy Hash: bbf5ac3ebcee3483d94711395227d2e3629a2e9d851a8396f5b6afdbe34653f3
Instruction Fuzzy Hash: 8F31E271A003819BCB10DF19DC88A5ABBF8FB80750F0189A9FC9897391D771DA44CBA1

Function 00BAA1A0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 113fileCOMMON

Download Yara Rule

APIs

_setjmp3.MSVCR80 ref: 00BAA212
fopen.MSVCR80 ref: 00BAA22E

Strings

1.2.8, xrefs: 00BAA1BF

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: _setjmp3fopen
String ID: 1.2.8
API String ID: 3541577079-509886058
Opcode ID: 171fe35621cd4a36db11a9acaa3e45bcd6a26149b8670f386403ae53e80ea4f7
Instruction ID: 992ca23f776ee1b1579c841576739080faaf77d490fac75ccb4040b22a8aff03
Opcode Fuzzy Hash: 171fe35621cd4a36db11a9acaa3e45bcd6a26149b8670f386403ae53e80ea4f7
Instruction Fuzzy Hash: CD319171A043045BDB24DB998C81BFFB7F8EF89700F14449EE959A7241D771A911CBA2

Function 0050D9E0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 106COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNEL32(0050E57A,00000000,4FF694EA), ref: 0050DA14
wcscat.MSVCR80 ref: 0050DA27

Part of subcall function 00500B70: ?fail@ios_base@std@@QBE_NXZ.MSVCP80(0050DAA4,00000000,00000002,00000000,00000020,00000040,00000001), ref: 00500B86

Part of subcall function 00500BF0: ?fail@ios_base@std@@QBE_NXZ.MSVCP80(?,?,0050DAB6,?,00000000,00000002,00000000,00000020,00000040,00000001), ref: 00500C04

Strings

zP, xrefs: 0050DB58, 0050DB5B

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: ?fail@ios_base@std@@$CreateDirectorywcscat
String ID: zP
API String ID: 2898546159-257844785
Opcode ID: 4f0b56061c965f2f2cf825f5a83e1c041622dd382fe08cce812f0975218b0ce2
Instruction ID: fef8abd74728a25b5cf643a3bcb35e4a0f4abb1658a775f4a695eedb0014710f
Opcode Fuzzy Hash: 4f0b56061c965f2f2cf825f5a83e1c041622dd382fe08cce812f0975218b0ce2
Instruction Fuzzy Hash: 7F414970A012189FDB24DB54CD56FAEBBB4BF84310F008299E2096B2D1DB70AE84CF51

Function 0041E140 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 98COMMON

Download Yara Rule

APIs

Part of subcall function 00406640: GetDlgItem.USER32(?,00000000), ref: 00406651

Part of subcall function 0041A3B0: _DebugHeapAllocator.LIBCPMTD ref: 0041A415
Part of subcall function 0041A3B0: _DebugHeapAllocator.LIBCPMTD ref: 0041A437
Part of subcall function 0041A3B0: _DebugHeapAllocator.LIBCPMTD ref: 0041A455
Part of subcall function 0041A3B0: _DebugHeapAllocator.LIBCPMTD ref: 0041A47D
Part of subcall function 0041A3B0: ?Load@CxImage@@QAE_NPB_WK@Z.CXIMAGECRT(00000000,00000000,?,00000000,?,0053E990,?,?,?,?,?,\class.xml,?,?,?,data\images\), ref: 0041A530

Part of subcall function 0041DE10: ??_V@YAXPAX@Z.MSVCR80(0000001F,4FF694EA,?,?,?,0000001F,00000001,CameraDlg\btn_properties,00000000,?,000003EB), ref: 0041DE55

Part of subcall function 0040DA40: MoveWindow.USER32(000001E2,-0000012B,000001E2,00000000,00000000,00000000,?,?,00408A2E,0000006D,0000002D,00000157,00000017,00000001,00000000,?), ref: 0040DA61

Part of subcall function 0041AA40: GetWindowLongW.USER32(?,4FF694EA), ref: 0041AA51

Part of subcall function 0041E880: SetWindowLongW.USER32(4FF694EA,00000001,4FF694EA), ref: 0041E895

SetLayeredWindowAttributes.USER32(?,00000000,000000B2,00000002,000000EC,00000000,000000EC,0000000A,0000000A,0000002D,00000014,00000001,Apply the selection,button,00000000,4FF694EA), ref: 0041E1F1

Part of subcall function 0041E8B0: MoveWindow.USER32(?,?,00000000,?,00000000,00000001,-00000003,?,0041E25F,?,00000001,?,?), ref: 0041E8E7

Part of subcall function 0041E370: GetSystemMetrics.USER32(0000004E), ref: 0041E37B
Part of subcall function 0041E370: GetSystemMetrics.USER32(0000004F), ref: 0041E386
Part of subcall function 0041E370: GetSystemMetrics.USER32(0000004C), ref: 0041E391
Part of subcall function 0041E370: GetSystemMetrics.USER32(0000004D), ref: 0041E3A2

Strings

Apply the selection, xrefs: 0041E19C
button, xrefs: 0041E18C

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Window$AllocatorDebugHeapMetricsSystem$LongMove$AttributesImage@@ItemLayeredLoad@
String ID: Apply the selection$button
API String ID: 70508497-2603280126
Opcode ID: 325f42cf690be37cc5bd74bc9656fe42c8c439b5651ae68e07e9d9de847688b4
Instruction ID: 04a5c8e6f4919bc5989b0440a3589c8b02fa676512b2dbfed97fa3f5bca5e94e
Opcode Fuzzy Hash: 325f42cf690be37cc5bd74bc9656fe42c8c439b5651ae68e07e9d9de847688b4
Instruction Fuzzy Hash: 6D310B70A40208ABDB08EBA5DD92FADB775AF44718F10011EF502A72D2DB797941CB59

Function 0041EED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 70COMMON

Download Yara Rule

APIs

GetSystemMetrics.USER32(00000004), ref: 0041EEDD

Part of subcall function 0040DA70: SetWindowPos.USER32(000001E2,-0000012B,000001E2,00000000,00000000,00000000,0040880B,?,?,0040880B,00000000,00000000,00000000,000001E2,-0000012B), ref: 0040DA95

Part of subcall function 004065F0: GetParent.USER32(?), ref: 004065FD

Part of subcall function 00406670: GetParent.USER32 ref: 0040669A
Part of subcall function 00406670: GetWindowRect.USER32(?,?), ref: 004066C0
Part of subcall function 00406670: GetWindowLongW.USER32(00000000,000000F0), ref: 004066DD
Part of subcall function 00406670: SystemParametersInfoW.USER32(00000030,00000000,?,00000000), ref: 0040670D

Part of subcall function 00406640: GetDlgItem.USER32(?,00000000), ref: 00406651

Part of subcall function 00408120: ??_V@YAXPAX@Z.MSVCR80(?,4FF694EA,?,?,?,?,00000000,00000000,00000000,00000000,0040641C,00000000), ref: 0040815C
Part of subcall function 00408120: lstrlenW.KERNEL32(0040641C,?,?,00000000,00000000,00000000,00000000,0040641C,00000000), ref: 00408172

Part of subcall function 0040DA40: MoveWindow.USER32(000001E2,-0000012B,000001E2,00000000,00000000,00000000,?,?,00408A2E,0000006D,0000002D,00000157,00000017,00000001,00000000,?), ref: 0040DA61

MoveWindow.USER32(00000000,00000000,00000001,000000E7,0000005F,00000048,00000017,00000001,00000113,00000034,000000C6,00000017,00000001,http://www.manycam.com/codec,00000000,00000211), ref: 0041EF99

Strings

http://www.manycam.com/codec, xrefs: 0041EF48

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: Window$MoveParentSystem$InfoItemLongMetricsParametersRectlstrlen
String ID: http://www.manycam.com/codec
API String ID: 3918154117-1165702928
Opcode ID: 3c772632c4e0218f7060b3e77bd1fd24f4dad1a2c19bf84bf2807e60cca908d2
Instruction ID: 149f93423e983da9d283a3b54f422c1b69b7f72d1b3e7c1b80e5497dd6e0fc8b
Opcode Fuzzy Hash: 3c772632c4e0218f7060b3e77bd1fd24f4dad1a2c19bf84bf2807e60cca908d2
Instruction Fuzzy Hash: 5C110D70B802096BFB18E7A5CC67FBE7225AF44708F00042DB717BA2C2DAB96520865D

Function 004C4AC0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 68COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.MSVCR80(00000000,00533F58,?,?,?,?,?,?,004BCB55,?,00533F58,000000FF,00533F58,004B85D2,00000000,00000000), ref: 004C4AD1
_invalid_parameter_noinfo.MSVCR80(?,00000000,00533F58,?,?,?,?,?,?,004BCB55,?,00533F58,000000FF,00533F58,004B85D2,00000000), ref: 004C4AEE

Strings

X?S, xrefs: 004C4B3E, 004C4B6F, 004C4B4E, 004C4B64, 004C4B41, 004C4B51

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: X?S
API String ID: 3215553584-928156776
Opcode ID: 300afce18172fda367b1e5a93a3139029df3230341556c5fc4a0edfbb8e029cc
Instruction ID: 6e252d52473bf057cc5c9ab3544af976a75f27afc912d5b1b1ccf3972680467b
Opcode Fuzzy Hash: 300afce18172fda367b1e5a93a3139029df3230341556c5fc4a0edfbb8e029cc
Instruction Fuzzy Hash: 7B214178E00204EFCB44EFA5C6A0E6FBB75AF89315B14819EE4055B311D738EE41CBA8

Function 00490E90 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 68COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.MSVCR80(?,0049315F,?,00000000,?,?,0048D60B,000000FF,?,?,00499CB6,?,?,?,00531AE6,000000FF), ref: 00490EA1
_invalid_parameter_noinfo.MSVCR80(00000003,?,0049315F,?,00000000,?,?,0048D60B,000000FF,?,?,00499CB6,?,?,?,00531AE6), ref: 00490EBE

Strings

_1I, xrefs: 00490F0E, 00490F3F, 00490F1E, 00490F34, 00490F11, 00490F21

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: _1I
API String ID: 3215553584-1375489561
Opcode ID: f8a0f0cd8858169583a3bfb7bac23ac9426c047314b7327a1f008bdd9c0947f0
Instruction ID: 39ed61a2cd6add22cacd6874f090497504692926125bc87bb284fc13d1f3f6b2
Opcode Fuzzy Hash: f8a0f0cd8858169583a3bfb7bac23ac9426c047314b7327a1f008bdd9c0947f0
Instruction Fuzzy Hash: 12213E74A00204EFCF04EFA5C58086EBF76AF89315B1489AEE4459B305CB38EA41CBA4

Function 00407190 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 67registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.ADVAPI32(00000040,?,00000000,00000040,?,?,004C7AEB,AppVersion,?,00000040,80000002,SOFTWARE\ManyCam,00020019), ref: 004071CC

Strings

zL, xrefs: 004071A1, 004071AB
zL, xrefs: 004071C6

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: QueryValue
String ID: zL$zL
API String ID: 3660427363-3006479296
Opcode ID: 9f65d8b26e372b6834f41cd3cc3a1fe9bf163b5c16fb74d4df2668fbdcee74fa
Instruction ID: fe241e5347fe9cda23539dab786d815e97edc30d153e6fd0c4fb1542d65cb657
Opcode Fuzzy Hash: 9f65d8b26e372b6834f41cd3cc3a1fe9bf163b5c16fb74d4df2668fbdcee74fa
Instruction Fuzzy Hash: 90211074A04209EBDB18CF99C454BAFB7B1FF84300F1085AEE911AB3D0D778A941CB96

Function 004535B0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 47memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 004B77A0: fwprintf.MSVCR80 ref: 004B7842
Part of subcall function 004B77A0: fflush.MSVCR80 ref: 004B7852

clock.MSVCR80 ref: 00453606
_DebugHeapAllocator.LIBCPMTD ref: 00453624

Strings

Entering: %s, xrefs: 004535F0

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocatorDebugHeapclockfflushfwprintf
String ID: Entering: %s
API String ID: 1338021872-1508582857
Opcode ID: 0a03b20c66a4bdf864266057b93037efe44b4c8f81b8abca9714b6f92b0e190a
Instruction ID: 630723a52c49dda7b07cbf3efddf69ebd1aec7d1a56bd84d85dfb89b8348d68f
Opcode Fuzzy Hash: 0a03b20c66a4bdf864266057b93037efe44b4c8f81b8abca9714b6f92b0e190a
Instruction Fuzzy Hash: CE1130B5904209EFDB04DF98D841AAEB7B4FF48714F00865DF82597381D7746904CBA5

Function 00BCA180 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 40COMMON

Download Yara Rule

APIs

_ftol.MSVCR80 ref: 00BCA1CE

Strings

Limiting gamma to 21474.83, xrefs: 00BCA1A3
Setting gamma=0, xrefs: 00BCA1EE

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: _ftol
String ID: Limiting gamma to 21474.83$Setting gamma=0
API String ID: 2545261903-3311646275
Opcode ID: 34ff89e2b836278df16b84f7edf0f32994f5e85f0bc30691a6bb4018836bd75d
Instruction ID: b52adf34e9d233e599ee1a92886d2340caac201f47b27491bebf045f4158b470
Opcode Fuzzy Hash: 34ff89e2b836278df16b84f7edf0f32994f5e85f0bc30691a6bb4018836bd75d
Instruction Fuzzy Hash: 0BF0AD70400649A2C3105B11FD42B6A77E4FF82B98F09099CE5D866269DB3098659A92

Function 004E29E0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 39COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.MSVCR80(?,?,004E1883,CN,000000FF,?,004E0A43,?,?,000000FF,?), ref: 004E29EF
_invalid_parameter_noinfo.MSVCR80(?,?,004E1883,CN,000000FF,?,004E0A43,?,?,000000FF,?), ref: 004E2A25

Strings

CN, xrefs: 004E29FF, 004E2A35, 004E2A15

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: CN
API String ID: 3215553584-3860229782
Opcode ID: 3ded8f196a3c02e06d8d6a8014f10332241c82d37bf5bc7cecde32a8ae69c9c0
Instruction ID: 055c263bba3631ac84532d8d275a506bca3ff744e03e32cc4505f628b268f32f
Opcode Fuzzy Hash: 3ded8f196a3c02e06d8d6a8014f10332241c82d37bf5bc7cecde32a8ae69c9c0
Instruction Fuzzy Hash: 6D110234A00049EFCB14DF45C280DADB7B6FB99305B25C299E8068B315DB31AF46DB84

Function 00412C20 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 39COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.MSVCR80(?,?,004129C3,C A,00000000,?,00412043,?,?,00000000,-0000012B,0040F9E0,00000000,?,?,-0000012B), ref: 00412C2F
_invalid_parameter_noinfo.MSVCR80(?,?,004129C3,C A,00000000,?,00412043,?,?,00000000,-0000012B,0040F9E0,00000000,?,?,-0000012B), ref: 00412C65

Strings

C A, xrefs: 00412C39, 00412C6F, 00412C4F

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: C A
API String ID: 3215553584-432193327
Opcode ID: dd3759dd0edff71de197c755aad0b75e312425a4acb4d65829b04bcd21f34736
Instruction ID: d50c8c72ee7c7c5e73367f5c550ec2d48e9c8be17f747839894a4a99daa275eb
Opcode Fuzzy Hash: dd3759dd0edff71de197c755aad0b75e312425a4acb4d65829b04bcd21f34736
Instruction Fuzzy Hash: 0E01E931600008DFCB08CF48D7D49ADFBB6EF69345B668199E5069B315D730EE90DB98

Function 00413CB0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 39COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.MSVCR80(?,?,004138F3,c7A,00000000,?,00413763,?,?,00000000,?,004136D0,?,?,?,45A), ref: 00413CBF
_invalid_parameter_noinfo.MSVCR80(?,?,004138F3,c7A,00000000,?,00413763,?,?,00000000,?,004136D0,?,?,?,45A), ref: 00413CF5

Strings

c7A, xrefs: 00413CCF, 00413D05, 00413CE5

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: c7A
API String ID: 3215553584-604798297
Opcode ID: 3ded8f196a3c02e06d8d6a8014f10332241c82d37bf5bc7cecde32a8ae69c9c0
Instruction ID: 4f8a117557595d7ace3a85e6c39e7ac69620622392f626f59c62cc3483bdb0bb
Opcode Fuzzy Hash: 3ded8f196a3c02e06d8d6a8014f10332241c82d37bf5bc7cecde32a8ae69c9c0
Instruction Fuzzy Hash: 3511D335A00009EFCB14DF48C290C9DB7B6FF99305B258199E9069B315EB31AF86DB88

Function 00BAD6E0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

exit.MSVCR80 ref: 00BAD6F6
fprintf.MSVCR80 ref: 00BAD729

Strings

%s, xrefs: 00BAD723

Memory Dump Source

Source File: 00000003.00000002.2162121317.0000000000BA1000.00000020.00000001.01000000.00000009.sdmp, Offset: 00BA0000, based on PE: true

Associated: 00000003.00000002.2162102407.0000000000BA0000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162159479.0000000000BED000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162176902.0000000000BF6000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162194158.0000000000BF7000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162213048.0000000000BFA000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162229425.0000000000BFB000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162244537.0000000000BFC000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2162259715.0000000000BFE000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_ba0000_ManyCam.jbxd

Similarity

API ID: exitfprintf
String ID: %s
API String ID: 4243785698-620797490
Opcode ID: 91faca297db9b2e536abce0876b173483713efe407cdec79880dd2ba922a87ea
Instruction ID: 3a5ad588f8b8937e158c31dea15b917228580b00ec915f13a24edd84b18f5001
Opcode Fuzzy Hash: 91faca297db9b2e536abce0876b173483713efe407cdec79880dd2ba922a87ea
Instruction Fuzzy Hash: 7AF0A735404201AFD300EF64DC48EAAB7F8EF89301F008458F445A7261DAB9D809CB56

Function 004B7880 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

Part of subcall function 00454C20: _time64.MSVCR80 ref: 00454C25

fwprintf.MSVCR80 ref: 004B78B3
fflush.MSVCR80 ref: 004B78C3

Strings

| %x %X | , xrefs: 004B7892

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: _time64fflushfwprintf
String ID: | %x %X |
API String ID: 804399740-1669508960
Opcode ID: a995debcebdf332dee2d0cd15bea4d7e243787ad81cf3f31d987c7b7fad9b84e
Instruction ID: 998b554e6e78045c2d5deda0b84162204a47a87edbaee598bb3a96ab0b245df9
Opcode Fuzzy Hash: a995debcebdf332dee2d0cd15bea4d7e243787ad81cf3f31d987c7b7fad9b84e
Instruction Fuzzy Hash: 4BF05471C01108ABDF04FB95DD868AEB738FF54309B5045A9E91667242DB34AA1CCBE5

Function 004150C0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 29COMMON

Download Yara Rule

APIs

memmove_s.MSVCR80 ref: 004150FA

Strings

nAA, xrefs: 004150C9
nAA, xrefs: 004150D2

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: memmove_s
String ID: nAA$nAA
API String ID: 1646303785-1657967095
Opcode ID: 48a814f637bbc169a426d2c1a272fa5cac1a1cc5ee3381e8494429463483b6d0
Instruction ID: 831bdc283bfef77eb9b1cad694d4ede0d3f081278f3ad19dba345cc0dbbac6ca
Opcode Fuzzy Hash: 48a814f637bbc169a426d2c1a272fa5cac1a1cc5ee3381e8494429463483b6d0
Instruction Fuzzy Hash: 0CF0D47090010DEFCB14DF9CC885D9EBBB8FB88344F10829DE919A7300E630EAA5CB90

Function 00523211 Relevance: 5.1, APIs: 4, Instructions: 59memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000000,0000000D,?,004086D8,?,00408648,0000000D,0040858E,00000000,?,?,00406405,0000040A,?,0000040A,00000000), ref: 0052318D
HeapAlloc.KERNEL32(00000000,?,004086D8,?,00408648,0000000D,0040858E,00000000,?,?,00406405,0000040A,?,0000040A,00000000,00000000), ref: 00523194

Part of subcall function 0052309D: IsProcessorFeaturePresent.KERNEL32(0000000C,?,0052317B,?,004086D8,?,00408648,0000000D,0040858E,00000000,?,?,00406405,0000040A,?,0000040A), ref: 005230A0

VirtualAlloc.KERNEL32(00000000,00001000,00001000,00000040,?,004086D8,?,00408648,0000000D,0040858E,00000000,?,?,00406405,0000040A,?), ref: 005231B6
VirtualFree.KERNEL32(00000000,00000000,00008000,?,?,004086D8,?,00408648,0000000D,0040858E,00000000,?,?,00406405,0000040A,?), ref: 005231E3

Memory Dump Source

Source File: 00000003.00000002.2161668869.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2161651621.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161766085.000000000053B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161817874.0000000000595000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161847062.000000000059B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161899891.000000000059C000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2161920592.00000000005A4000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_ManyCam.jbxd

Similarity

API ID: AllocHeapVirtual$FeatureFreePresentProcessProcessor
String ID:
API String ID: 4058086966-0
Opcode ID: 0c4867eb5bd92bb6381ce8f4e327ffa02bccf704549b714ad9cee9f0e79b5bb8
Instruction ID: b5a60a9bbef02a3c563d751fc20c4e74480abeb514ab3cab8f797184bd5a284a
Opcode Fuzzy Hash: 0c4867eb5bd92bb6381ce8f4e327ffa02bccf704549b714ad9cee9f0e79b5bb8
Instruction Fuzzy Hash: 3711D631240231AFEB21176CFC0AB663E65BF67741F100820FA11D62E0D738CD08EAA0

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may circumvent mechanisms designed to control elevate privileges to gain higher-level permissions. Most modern systems contain native elevation control mechanisms that are intended to limit privileges that a user can perform on a machine. Authorization has to be granted to specific users in order to perform tasks that can be considered of higher risk. An adversary can perform several methods to take advantage of built-in control mechanisms in order to escalate privileges on a system.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Modification, Windows Registry: Windows Registry Key Modification
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report iieCxV2b1n.msi

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Yara Signatures

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Config.Msi\6c18ea.rbs

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\MSBuild.exe.log

C:\Users\user\AppData\Local\Ormolu\CrashRpt.dll

C:\Users\user\AppData\Local\Ormolu\ManyCam.exe

C:\Users\user\AppData\Local\Ormolu\cv099.dll

C:\Users\user\AppData\Local\Ormolu\cxcore099.dll

C:\Users\user\AppData\Local\Ormolu\cximagecrt.dll

C:\Users\user\AppData\Local\Ormolu\dbghelp.dll

C:\Users\user\AppData\Local\Ormolu\gxfiogr

C:\Users\user\AppData\Local\Ormolu\highgui099.dll

C:\Users\user\AppData\Local\Ormolu\rsjddfw

C:\Users\user\AppData\Local\Temp\804a2825

C:\Users\user\AppData\Local\Temp\8f084743

C:\Users\user\AppData\Local\Temp\exuquepx

C:\Users\user\AppData\Local\Temp\ndae

C:\Users\user\AppData\Local\Temp\svubpwldttjkvt

C:\Users\user\AppData\Roaming\demoArchivebcz\CrashRpt.dll

Windows Analysis Report
iieCxV2b1n.msi

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre